Command Injection in the diagnostics interface of the Bosch Network Synchronizer allows unauthorized users full access to the device.