Description
The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 and earlier was found to be vulnerable to command injection through its diagnostics web interface. This allows execution of shell commands.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Bosch | PRA-ES8P2S | unspecified – ≤ 1.01.05 | — |