CVE-2022-32534: Bosch PRA-ES8P2S Firmware

Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days.

The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 and earlier was found to be vulnerable to command injection through its diagnostics web interface. This allows execution of shell commands.

Affected products

• Bosch PRA-ES8P2S Firmware: up to and including 1.01.05

Published 2022-06-23. Last modified 2026-06-17.