CVE-2019-7728

An issue was discovered in the Bosch Smart Camera App before 1.3.1 for Android. Due to improperly implemented TLS certificate checks, a malicious actor could potentially succeed in executing a man-in-the-middle attack for some connections. (The Bosch Smart Home App is not affected. iOS Apps are not affected.)

• CWE-295

• https://psirt.bosch.com/Advisory/BOSCH-2019-0202.htmlVendor Advisory
• https://psirt.bosch.com/Advisory/BOSCH-2019-0202.htmlVendor Advisory

Published

Feb 22, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-7720taocms through 2014-05-24 allows eval injection by placing P…
• CVE-2019-7721lib/NCCms.class.php in nc-cms 3.5 allows upload of .php file…
• CVE-2019-7722PMD 5.8.1 and earlier processes XML external entities in rul…
• CVE-2019-7725includes/core/is_user.php in NukeViet before 4.3.04 deserial…9.8
• CVE-2019-7726modules/banners/funcs/click.php in NukeViet before 4.3.04 ha…9.8
• CVE-2019-7727In NICE Engage through 6.5, the default configuration binds …
• CVE-2019-7729An issue was discovered in the Bosch Smart Camera App before…
• CVE-2019-7730MyWebSQL 3.7 has a Cross-site request forgery (CSRF) vulnera…
• CVE-2019-7731MyWebSQL 3.7 has a remote code execution (RCE) vulnerability…
• CVE-2019-7732In Live555 0.95, a setup packet can cause a memory leak lead…
• CVE-2019-7733In Live555 0.95, there is a buffer overflow via a large inte…
• CVE-2019-7736D-Link DIR-600M C1 3.04 devices allow authentication bypass …