Pra Es8P2S

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:bosch:pra-es8p2s:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBosch (fd8ddba2-7d59-56e9-89d8-6fcadc94214e)
ProductPra Es8P2S (09db3fd8-def1-535b-9637-ca326f95f2dc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-32536 vulnerable 2026-06-08 05:44:44.939357 Privilege Escalation
HIGH (8.8)
The user access rights validation in the web server of the Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 was insufficient. This would allow a non-administrator user to obtain administrator user access rights.
Published: 2022-06-22T13:55:56.000Z
Updated: 2024-08-03T07:46:43.564Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32535 vulnerable 2026-06-08 05:44:44.938756 Web server runs as root
MEDIUM (4.8)
The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 runs its web server with root privilege. In combination with CVE-2022-23534 this could give an attacker root access to the switch.
Published: 2022-06-22T13:55:55.000Z
Updated: 2024-08-03T07:46:43.473Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32534 vulnerable 2026-06-08 05:44:44.936836 OS Command Injection
HIGH (8.8)
The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 and earlier was found to be vulnerable to command injection through its diagnostics web interface. This allows execution of shell commands.
Published: 2022-06-22T13:55:56.000Z
Updated: 2024-08-03T07:46:43.351Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.