Remote Code Execution Vulnerability in ctrlX OS by Bosch
CVE-2025-24349

7.1HIGH

Key Information:

Vendor: Bosch Rexroth Ag
Status: Ctrlx Os - Device Admin
Vendor: CVE Published:; 30 April 2025

🔔 Create Bosch Rexroth Ag Vulnerability Alert

What is CVE-2025-24349?

A flaw in the Network Interfaces feature of Bosch's ctrlX OS web application allows a remote authenticated attacker with low privileges to manipulate network settings. Through specially crafted HTTP requests, this vulnerability permits deletion of the configuration for physical network interfaces, potentially leading to significant disruptions in network operations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

ctrlX OS - Device Admin 1.12.0 <= 1.12.9

ctrlX OS - Device Admin 1.20.0 <= 1.20.7

ctrlX OS - Device Admin 2.6.0 <= 2.6.8

References

https://psirt.bosch.com/security-advisories/BOSCH-SA-6404...

vendor-advisory

CVSS V3.1

Score:

7.1

Severity:

HIGH

Confidentiality:

None

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 30, 2025
Vulnerability Reserved
Jan 20, 2025

JSON

Bosch Rexroth Ag

What is CVE-2025-24349?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

Affected Version(s)

References

CVSS V3.1

Timeline

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.