high8.8
CVE-2022-32536
The user access rights validation in the web server of the Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 was insufficient.
Impact
The user access rights validation in the web server of the Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 was insufficient. This would allow a non-administrator user to obtain administrator user access rights.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bosch | Pra-Es8p2s Firmware | through 1.01.05 |