Lucene search

K
cvelistBoschCVELIST:CVE-2023-48260
HistoryJan 10, 2024 - 1:06 p.m.

CVE-2023-48260

2024-01-1013:06:48
bosch
www.cve.org
3
vulnerability
remote attacker
database
http request

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.001

Percentile

29.4%

The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request.

CNA Affected

[
  {
    "vendor": "Rexroth",
    "product": "Nexo cordless nutrunner NXA015S-36V (0608842001)",
    "versions": [
      {
        "version": "NEXO-OS V1000-Release",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "NEXO-OS V1500-SP2"
      }
    ]
  },
  {
    "vendor": "Rexroth",
    "product": "Nexo cordless nutrunner NXA030S-36V (0608842002)",
    "versions": [
      {
        "version": "NEXO-OS V1000-Release",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "NEXO-OS V1500-SP2"
      }
    ]
  },
  {
    "vendor": "Rexroth",
    "product": "Nexo cordless nutrunner NXA050S-36V (0608842003)",
    "versions": [
      {
        "version": "NEXO-OS V1000-Release",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "NEXO-OS V1500-SP2"
      }
    ]
  },
  {
    "vendor": "Rexroth",
    "product": "Nexo cordless nutrunner NXP012QD-36V (0608842005)",
    "versions": [
      {
        "version": "NEXO-OS V1000-Release",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "NEXO-OS V1500-SP2"
      }
    ]
  },
  {
    "vendor": "Rexroth",
    "product": "Nexo cordless nutrunner NXA015S-36V-B (0608842006)",
    "versions": [
      {
        "version": "NEXO-OS V1000-Release",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "NEXO-OS V1500-SP2"
      }
    ]
  },
  {
    "vendor": "Rexroth",
    "product": "Nexo cordless nutrunner NXA030S-36V-B (0608842007)",
    "versions": [
      {
        "version": "NEXO-OS V1000-Release",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "NEXO-OS V1500-SP2"
      }
    ]
  },
  {
    "vendor": "Rexroth",
    "product": "Nexo cordless nutrunner NXA050S-36V-B (0608842008)",
    "versions": [
      {
        "version": "NEXO-OS V1000-Release",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "NEXO-OS V1500-SP2"
      }
    ]
  },
  {
    "vendor": "Rexroth",
    "product": "Nexo cordless nutrunner NXP012QD-36V-B (0608842010)",
    "versions": [
      {
        "version": "NEXO-OS V1000-Release",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "NEXO-OS V1500-SP2"
      }
    ]
  },
  {
    "vendor": "Rexroth",
    "product": "Nexo cordless nutrunner NXA011S-36V (0608842011)",
    "versions": [
      {
        "version": "NEXO-OS V1000-Release",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "NEXO-OS V1500-SP2"
      }
    ]
  },
  {
    "vendor": "Rexroth",
    "product": "Nexo cordless nutrunner NXA011S-36V-B (0608842012)",
    "versions": [
      {
        "version": "NEXO-OS V1000-Release",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "NEXO-OS V1500-SP2"
      }
    ]
  },
  {
    "vendor": "Rexroth",
    "product": "Nexo cordless nutrunner NXA065S-36V (0608842013)",
    "versions": [
      {
        "version": "NEXO-OS V1000-Release",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "NEXO-OS V1500-SP2"
      }
    ]
  },
  {
    "vendor": "Rexroth",
    "product": "Nexo cordless nutrunner NXA065S-36V-B (0608842014)",
    "versions": [
      {
        "version": "NEXO-OS V1000-Release",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "NEXO-OS V1500-SP2"
      }
    ]
  },
  {
    "vendor": "Rexroth",
    "product": "Nexo cordless nutrunner NXV012T-36V (0608842015)",
    "versions": [
      {
        "version": "NEXO-OS V1000-Release",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "NEXO-OS V1500-SP2"
      }
    ]
  },
  {
    "vendor": "Rexroth",
    "product": "Nexo cordless nutrunner NXV012T-36V-B (0608842016)",
    "versions": [
      {
        "version": "NEXO-OS V1000-Release",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "NEXO-OS V1500-SP2"
      }
    ]
  },
  {
    "vendor": "Rexroth",
    "product": "Nexo special cordless nutrunner (0608PE2272)",
    "versions": [
      {
        "version": "NEXO-OS V1000-Release",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "NEXO-OS V1500-SP2"
      }
    ]
  },
  {
    "vendor": "Rexroth",
    "product": "Nexo special cordless nutrunner (0608PE2301)",
    "versions": [
      {
        "version": "NEXO-OS V1000-Release",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "NEXO-OS V1500-SP2"
      }
    ]
  },
  {
    "vendor": "Rexroth",
    "product": "Nexo special cordless nutrunner (0608PE2514)",
    "versions": [
      {
        "version": "NEXO-OS V1000-Release",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "NEXO-OS V1500-SP2"
      }
    ]
  },
  {
    "vendor": "Rexroth",
    "product": "Nexo special cordless nutrunner (0608PE2515)",
    "versions": [
      {
        "version": "NEXO-OS V1000-Release",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "NEXO-OS V1500-SP2"
      }
    ]
  },
  {
    "vendor": "Rexroth",
    "product": "Nexo special cordless nutrunner (0608PE2666)",
    "versions": [
      {
        "version": "NEXO-OS V1000-Release",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "NEXO-OS V1500-SP2"
      }
    ]
  },
  {
    "vendor": "Rexroth",
    "product": "Nexo special cordless nutrunner (0608PE2673)",
    "versions": [
      {
        "version": "NEXO-OS V1000-Release",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "NEXO-OS V1500-SP2"
      }
    ]
  }
]

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.001

Percentile

29.4%

Related for CVELIST:CVE-2023-48260