CVE-2022-32536: Bosch PRA-ES8P2S Firmware

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

The user access rights validation in the web server of the Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 was insufficient. This would allow a non-administrator user to obtain administrator user access rights.

Affected products

• Bosch PRA-ES8P2S Firmware: up to and including 1.01.05

Published 2022-06-23. Last modified 2026-06-17.