medium4.8
CVE-2022-32535
The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 runs its web server with root privilege.
Impact
The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 runs its web server with root privilege. In combination with CVE-2022-23534 this could give an attacker root access to the switch.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bosch | Pra-Es8p2s Firmware | through 1.01.05 |