CVE-2022-32535CWE-250

Web server runs as root

Medium · published June 22, 2022

CVSS v3.1
4.8
EPSS
1%
Percentile
55.9
In the wild
Unconfirmed
What it is

The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 runs its web server with root privilege. In combination with CVE-2022-23534 this could give an attacker root access to the switch.

The record
Technical detail
CVSS v3.1
4.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00793 · 55.9th percentile
Weakness
CWE-250 · Execution with Unnecessary Privileges
Published
2022-06-22T13:55Z
EPSS history
Timeline
  • 22 JUN 13:55Z
    Web server runs as root
    cvelistv5