CVE-2024-25002

8.8 highEPSS 1.2%

High (8.8). EPSS 1.2% chance of exploitation in the next 30 days.

Command Injection in the diagnostics interface of the Bosch Network Synchronizer allows unauthorized users full access to the device.

Severity

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2024-03-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19