CVE-2019-11898

Severity: critical (CVSS 9.9 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-09-12 · updated 2026-06-17
Weakness: CWE-798

Description

Unauthorized APE administration privileges can be achieved by reverse engineering one of the APE service tools. The service tool is discontinued with Bosch Access Professional Edition (APE) 3.8.

Affected products

Bosch Access Professional Edition: before 3.8 — fixed in 3.8

How to fix

Upgrade to a fixed version: Bosch Access Professional Edition 3.8. Check the vendor advisory for mitigations.

References

https://psirt.bosch.com/Advisory/BOSCH-SA-710832.html
https://psirt.bosch.com/Advisory/BOSCH-SA-710832.html

Get alerted when CVE-2019-11898 or the next vulnerability affects your stack