Arbitrary File Write Vulnerability in ctrlX OS by Bosch

CVE-2025-24350

What is CVE-2025-24350?

A security flaw exists within the 'Certificates and Keys' feature of Bosch's ctrlX OS web application, which could allow an authenticated low-privileged attacker to exploit the system. By crafting specific HTTP requests, the attacker could manage to write arbitrary certificates to unintended locations in the file system, posing potential risks to the integrity and security of the application.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References