Bosch PRA-ES8P2S Firmware vulnerabilities

3 CVEs affecting Bosch PRA-ES8P2S Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-32536, published 2022-06-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-32534, published 2022-06-23. Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days. The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 and earlier was found to be vulnerable to command injection through its diagnostics web interface. This allows execution of shell…
CVE-2022-32536, published 2022-06-23. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. The user access rights validation in the web server of the Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 was insufficient. This would allow a non-administrator user to obtain…
CVE-2022-32535, published 2022-06-23. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 runs its web server with root privilege. In combination with CVE-2022-23534 this could give an attacker root access to the switch.