Bosch PRA-ES8P2S

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:h:bosch:pra-es8p2s:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorBosch (fd8ddba2-7d59-56e9-89d8-6fcadc94214e)
ProductPra Es8P2S (09db3fd8-def1-535b-9637-ca326f95f2dc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-32536 not_vulnerable 2026-06-08 05:44:44.939412 Privilege Escalation
HIGH (8.8)
The user access rights validation in the web server of the Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 was insufficient. This would allow a non-administrator user to obtain administrator user access rights.
Published: 2022-06-22T13:55:56.000Z
Updated: 2024-08-03T07:46:43.564Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32535 not_vulnerable 2026-06-08 05:44:44.938935 Web server runs as root
MEDIUM (4.8)
The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 runs its web server with root privilege. In combination with CVE-2022-23534 this could give an attacker root access to the switch.
Published: 2022-06-22T13:55:55.000Z
Updated: 2024-08-03T07:46:43.473Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32534 not_vulnerable 2026-06-08 05:44:44.938351 OS Command Injection
HIGH (8.8)
The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 and earlier was found to be vulnerable to command injection through its diagnostics web interface. This allows execution of shell commands.
Published: 2022-06-22T13:55:56.000Z
Updated: 2024-08-03T07:46:43.351Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.