CVE-2022-32534

HIGH

8.8

Beschreibung

The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 and earlier was found to be vulnerable to command injection through its diagnostics web interface. This allows execution of shell commands.

CVE Details

CVSS v3.1 Bewertung8.8

SchweregradHIGH

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienLOW

BenutzerinteraktionNONE

Veroffentlicht6/23/2022

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

bosch:pra-es8p2sbosch:pra-es8p2s_firmware

Schwachen (CWE)

CWE-20CWE-78

Referenzen

https://psirt.bosch.com/security-advisories/BOSCH-SA-247052-BT.html(psirt@bosch.com)

https://psirt.bosch.com/security-advisories/BOSCH-SA-247052-BT.html(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.