Skip to content
OpenAdvisories
Medium · 4.8 CVE-2022-32535 EUVD-2022-35603GHSA-93px-rpm7-wc98

Web server runs as root

Published Jun 22, 2022 · Updated Aug 3, 2024 · Assigned by bosch

Description

The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 runs its web server with root privilege. In combination with CVE-2022-23534 this could give an attacker root access to the switch.

Affected products

VendorProductAffectedFixed
Bosch PRA-ES8P2S unspecified – ≤ 1.01.05 —

References