CVE-2025-48861
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-08-14

Last updated on: 2025-08-14

Assigner: Robert Bosch GmbH

Description
A vulnerability in the Task API endpoint of the ctrlX OS setup mechanism allowed a remote, unauthenticated attacker to access and extract internal application data, including potential debug logs and the version of installed apps.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-08-14
Last Modified
2025-08-14
Generated
2026-05-27
AI Q&A
2025-08-14
EPSS Evaluated
2026-05-25
NVD
CVE-2025-48861
EUVD
EUVD-2025-24680
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
bosch ctrlx_os_setup *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-284 The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability exists in the Task API endpoint of the ctrlX OS setup mechanism. It allows a remote, unauthenticated attacker to access and extract internal application data, which may include debug logs and the version information of installed applications.


How can this vulnerability impact me? :

The vulnerability can lead to unauthorized disclosure of internal application data, potentially exposing sensitive information such as debug logs and application version details. This could aid attackers in further exploiting the system or understanding its configuration.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart