Bosch ctrlX OS Hosts Functionality Vulnerability Allowing Unintended Manipulation of the Hosts File

A vulnerability exists in the Hosts functionality of the ctrlX OS web application, allowing remote authenticated (low-privileged) attackers to improperly manipulate the hosts file through crafted HTTP requests.

Impact

Exploitation of this vulnerability could lead to unauthorized modifications of the hosts file, potentially disrupting network configurations or causing misrouting of network traffic.

Remediation

Users are advised to update to the latest versions of the affected components. The update may require a device reboot. To check if the updated versions are installed, use the device's package management system.