Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2022-32536

Privilege Escalation

The user access rights validation in the web server of the Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 was insufficient. This would allow a non-administrator user to obtain administrator user access rights.

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed
Vendors
Bosch
Products
Pra-es8p2s Pra-es8p2s Firmware
CVE-2022-32535

Web server runs as root

The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 runs its web server with root privilege. In combination with CVE-2022-23534 this could give an attacker root access to the switch.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Bosch
Products
Pra-es8p2s Pra-es8p2s Firmware
CVE-2022-32534

OS Command Injection

The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 and earlier was found to be vulnerable to command injection through its diagnostics web interface. This allows execution of shell commands.

CVSS 3.1 · 8.8 High EPSS 2.5% KEV · Not listed
Vendors
Bosch
Products
Pra-es8p2s Pra-es8p2s Firmware