CVE-2025-24345

Publication date

2025-04-30 11:35:44

Family

bosch

State

PUBLISHED

Description

A vulnerability in the “Hosts” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to manipulate the “hosts” file in an unintended manner via a crafted HTTP request.