Vulnerability Details CVE-2022-32535
The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 runs its web server with root privilege. In combination with CVE-2022-23534 this could give an attacker root access to the switch.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 50.5%
CVSS Severity
CVSS v3 Score 4.8
CVSS v2 Score 10.0
References
Products affected by CVE-2022-32535
-
cpe:2.3:h:bosch:pra-es8p2s:-
-
cpe:2.3:o:bosch:pra-es8p2s_firmware:-
-
cpe:2.3:o:bosch:pra-es8p2s_firmware:1.01.05