Lucene search
HistoryJan 10, 2024 - 11:15 a.m.
CVE-2023-48244
vulnerability
remote attacker
client-side script
http request
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
6
Confidence
High
EPSS
0.001
Percentile
25.2%
The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s session via a crafted URL or HTTP request.
Affected configurations
Node
boschnexo-osRange1000–1500-sp2
boschnexo_cordless_nutrunner_nxa011s-36v-b_\(0608842012\)Match-
ORboschnexo_cordless_nutrunner_nxa011s-36v_\(0608842011\)Match-
ORboschnexo_cordless_nutrunner_nxa015s-36v-b_\(0608842006\)Match-
ORboschnexo_cordless_nutrunner_nxa015s-36v_\(0608842001\)Match-
ORboschnexo_cordless_nutrunner_nxa030s-36v-b_\(0608842007\)Match-
ORboschnexo_cordless_nutrunner_nxa030s-36v_\(0608842002\)Match-
ORboschnexo_cordless_nutrunner_nxa050s-36v-b_\(0608842008\)Match-
ORboschnexo_cordless_nutrunner_nxa050s-36v_\(0608842003\)Match-
ORboschnexo_cordless_nutrunner_nxa065s-36v-b_\(0608842014\)Match-
ORboschnexo_cordless_nutrunner_nxa065s-36v_\(0608842013\)Match-
ORboschnexo_cordless_nutrunner_nxp012qd-36v-b_\(0608842010\)Match-
ORboschnexo_cordless_nutrunner_nxp012qd-36v_\(0608842005\)Match-
ORboschnexo_cordless_nutrunner_nxv012t-36v-b_\(0608842016\)Match-
ORboschnexo_cordless_nutrunner_nxv012t-36v_\(0608842015\)Match-
ORboschnexo_special_cordless_nutrunner_\(0608pe2272\)Match-
ORboschnexo_special_cordless_nutrunner_\(0608pe2301\)Match-
ORboschnexo_special_cordless_nutrunner_\(0608pe2514\)Match-
ORboschnexo_special_cordless_nutrunner_\(0608pe2515\)Match-
ORboschnexo_special_cordless_nutrunner_\(0608pe2666\)Match-
ORboschnexo_special_cordless_nutrunner_\(0608pe2673\)Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| bosch | nexo-os | * | cpe:2.3:o:bosch:nexo-os:*:*:*:*:*:*:*:* |
| bosch | nexo_cordless_nutrunner_nxa011s-36v-b_\(0608842012\) | - | cpe:2.3:h:bosch:nexo_cordless_nutrunner_nxa011s-36v-b_\(0608842012\):-:*:*:*:*:*:*:* |
| bosch | nexo_cordless_nutrunner_nxa011s-36v_\(0608842011\) | - | cpe:2.3:h:bosch:nexo_cordless_nutrunner_nxa011s-36v_\(0608842011\):-:*:*:*:*:*:*:* |
| bosch | nexo_cordless_nutrunner_nxa015s-36v-b_\(0608842006\) | - | cpe:2.3:h:bosch:nexo_cordless_nutrunner_nxa015s-36v-b_\(0608842006\):-:*:*:*:*:*:*:* |
| bosch | nexo_cordless_nutrunner_nxa015s-36v_\(0608842001\) | - | cpe:2.3:h:bosch:nexo_cordless_nutrunner_nxa015s-36v_\(0608842001\):-:*:*:*:*:*:*:* |
| bosch | nexo_cordless_nutrunner_nxa030s-36v-b_\(0608842007\) | - | cpe:2.3:h:bosch:nexo_cordless_nutrunner_nxa030s-36v-b_\(0608842007\):-:*:*:*:*:*:*:* |
| bosch | nexo_cordless_nutrunner_nxa030s-36v_\(0608842002\) | - | cpe:2.3:h:bosch:nexo_cordless_nutrunner_nxa030s-36v_\(0608842002\):-:*:*:*:*:*:*:* |
| bosch | nexo_cordless_nutrunner_nxa050s-36v-b_\(0608842008\) | - | cpe:2.3:h:bosch:nexo_cordless_nutrunner_nxa050s-36v-b_\(0608842008\):-:*:*:*:*:*:*:* |
| bosch | nexo_cordless_nutrunner_nxa050s-36v_\(0608842003\) | - | cpe:2.3:h:bosch:nexo_cordless_nutrunner_nxa050s-36v_\(0608842003\):-:*:*:*:*:*:*:* |
| bosch | nexo_cordless_nutrunner_nxa065s-36v-b_\(0608842014\) | - | cpe:2.3:h:bosch:nexo_cordless_nutrunner_nxa065s-36v-b_\(0608842014\):-:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2023-48244
2024-01-10 10:37:55
prion
prion
Cross site request forgery (csrf)
2024-01-10 11:15:00
cve
cve
CVE-2023-48244
2024-01-10 11:15:08
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
6
Confidence
High
EPSS
0.001
Percentile
25.2%
Related for NVD:CVE-2023-48244