← Back

Pra Es8p2s Firmware

pra-es8p2s_firmware

Vendor: Bosch • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-32536
1Bosch
1Pra Es8p2s Firmware
Jun 17, 2026
Jun 23, 2022
N/A· v4
8.8 HIGH· v3
9.0 HIGH· v2
The user access rights validation in the web server of the Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 was insufficient. This would allow a non-administrator user to obtain administrator user access ri...Show more
The user access rights validation in the web server of the Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 was insufficient. This would allow a non-administrator user to obtain administrator user access rights.Show less
CVE-2022-32535
1Bosch
1Pra Es8p2s Firmware
Jun 17, 2026
Jun 23, 2022
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 runs its web server with root privilege. In combination with CVE-2022-23534 this could give an attacker root access to the switch.
CVE-2022-32534
1Bosch
1Pra Es8p2s Firmware
Jun 17, 2026
Jun 23, 2022
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 and earlier was found to be vulnerable to command injection through its diagnostics web interface. This allows execution of shell commands.