CVE-2022-32536: Privilege Escalation
Published Jun 22, 2022
·Updated
The user access rights validation in the web server of the Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 was insufficient. This would allow a non-administrator user to obtain administrator user access rights.
Affected Software
2 affected components
Bosch Pra-es8p2s Firmware<=1.01.05
Bosch PRA-ES8P2S
Event History
Jun 22, 2022
CVE Published
via MITRE·01:55 PM
Data Sourced
via MITRE·01:55 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this security issue?
The vulnerability ID for this security issue is CVE-2022-32536.
2
What is the title of this vulnerability?
The title of this vulnerability is 'The user access rights validation in the web server of the Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 is insufficient.'
3
What is the severity of CVE-2022-32536?
The severity of CVE-2022-32536 is critical with a CVSS score of 8.8.
4
What is the affected software version of CVE-2022-32536?
The affected software version of CVE-2022-32536 is 1.01.05.
5
How can a non-administrator user exploit this vulnerability?
A non-administrator user can exploit this vulnerability by obtaining administrator user access rights.