CVE-2025-27532

Publication date

2025-04-30 11:49:02

Family

bosch

State

PUBLISHED

Description

A vulnerability in the “Backup & Restore” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to access secret information via multiple crafted HTTP requests.