Remote Code Execution in Telex RDC Server and RTS VLink Virtual Matrix
psirt.bosch.com
BOSCH-SA-992447-BT: A security vulnerability has been uncovered in the REST API of the Telex Remote Dispatch Console Server and the RTS VLink Virtual Matrix Software. The vulnerability will allow a Remote Code Execution (RCE) attack. All versions < 1.3.0 of the Telex Remote Dispatch Console Server are affected by this vulnerability. Versions v5 and v6 (< 6.6.0) of the RTS VLink Virtual Matrix Software are affected by this vulnerability. Older versions (v4 and lower) are not affected. The vulnerability has been uncovered and disclosed responsibly by external researcher Omer Shaik.
The original post: /r/cybersecurity by /u/Agreeable_Cod3 on 2025-06-12 11:58:01.

Hey folks, Wanted to share a personal win from the past few months.

In November 2024, I was doing a penetration test for a government agency and came across a Bosch Telex Remote Dispatch Console (RDC) server. It’s software used in critical environments like 911 dispatch, public safety, utilities, and transportation, so it immediately caught my attention.

Out of curiosity, I started researching it deeper on my own time. After around three months of analysis and poking, I found a remote code execution (RCE) vulnerability.

I reported it to Bosch, and their PSIRT team was really great to work with. Super professional and transparent. They acknowledged the issue, issued a patch, and published an official advisory.

Advisory link: https://psirt.bosch.com/security-advisories/bosch-sa-992447-bt.html

CVE is CVE-2025-29902

If you’re running Telex RDC in any production or critical infrastructure, I highly recommend updating it ASAP.

Cheers, Omer Shaik Security Researcher & Pentester LinkedIn: https://www.linkedin.com/in/omer-shaik