Bosch ctrlX OS Network Interfaces Vulnerability Allowing Unauthorized Network Configuration Manipulation

A vulnerability exists in the Network Interfaces feature of the Bosch ctrlX OS web application. This issue allows remote authenticated (low-privileged) attackers to alter the network configuration file by sending a crafted HTTP request. The vulnerability arises from improper validation of input, enabling unauthorized modifications to network settings.

Impact

Exploitation of this vulnerability could lead to unauthorized changes in the network configuration, potentially disrupting network connectivity or causing misrouting of network traffic.

Remediation

Users are advised to update to the latest versions of the affected components. The update process may require a device reboot. To check if the update was successful, verify the installed version using the device's package management system.