CVE-2022-32534

9.8 criticalEPSS 2.5%

Critical (9.8) in bosch pra-es8p2s firmware. EPSS 2.5% chance of exploitation in the next 30 days.

The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 and earlier was found to be vulnerable to command injection through its diagnostics web interface. This allows execution of shell commands.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.5% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
CWEs: CWE-78, CWE-20
Published: 2022-06-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

bosch:pra-es8p2s_firmware

References

https://psirt.bosch.com/security-advisories/BOSCH-SA-247052-BT.html
https://psirt.bosch.com/security-advisories/BOSCH-SA-247052-BT.html

Check your stack JSON