Remote Code Execution Vulnerability in ctrlX OS by Bosch

CVE-2025-24338

What is CVE-2025-24338?

A vulnerability exists within the 'Manages app data' feature of the web application in ctrlX OS, enabling a low-privileged authenticated remote attacker to execute arbitrary client-side code in another user's browser. This can occur through the submission of multiple specially crafted HTTP requests, potentially compromising user data and application integrity. It is crucial for users of ctrlX OS to remain vigilant and apply necessary security measures as outlined in the vendor's advisory.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References