CVE-2025-24349

Publication date

2025-04-30 11:44:33

Family

bosch

State

PUBLISHED

Description

A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to delete the configuration of physical network interfaces via a crafted HTTP request.