PRA-ES8P2S vulnerabilities

3 known vulnerabilities in PRA-ES8P2S from Bosch. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  PRA-ES8P2S: Improper Privilege Management

  CVE-2022-32536Jun 23, 2022BoschEPSS 1.09%

  The user access rights validation in the web server of the Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 was insufficient. This would allow a non-administrator user to obtain administrator user access rights.

• 9.8 Critical severity

  PRA-ES8P2S: Improper Privilege Management

  CVE-2022-32535Jun 23, 2022Bosch

  The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 runs its web server with root privilege. In combination with CVE-2022-23534 this could give an attacker root access to the switch.

• 9.8 Critical severity

  PRA-ES8P2S: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-32534Jun 23, 2022BoschEPSS 2.49%

  The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 and earlier was found to be vulnerable to command injection through its diagnostics web interface. This allows execution of shell commands.