Skip to content
OpenAdvisories
High · 8.8 CVE-2024-25002 EUVD-2024-22364GHSA-2r3w-v93h-m6vw

Command Injection in the diagnostics interface of the Bosch Network Synchronizer allows unauthorized users full access to the device.

Published Mar 25, 2024 · Updated Aug 9, 2024 · Assigned by bosch

Vendor: Bosch Product: Network Synchronizer Enterprise Product: Network Synchronizer Standard

Description

Command Injection in the diagnostics interface of the Bosch Network Synchronizer allows unauthorized users full access to the device.

Affected products

VendorProductAffectedFixed
Bosch Network Synchronizer Enterprise < 9.30 9.30
Bosch Network Synchronizer Standard < 9.30 9.30

References