Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-48238 State: PUBLISHED Published: 2023-11-17T21:35:00.111Z Last Updated: 2024-10-11T15:24:50.982Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: joaquimserafim Products: json-web-token Problem Types: CWE-345 Description: joaquimserafim/json-web-token is a javascript library use to interact with JSON Web Tokens (JWT) which are a compact URL-safe means of representing claims to be transferred between two parties. Affected versions of the json-web-token library are vulnerable to a JWT algorithm confusion attack. On line 86 of the 'index.js' file, the algorithm to use for verifying the signature of the JWT token is taken from the JWT token, which
he 'index.js' file, the algorithm to use for verifying the signature of the JWT token is taken from the JWT token, which at that point is still unverified and thus shouldn't be trusted. To exploit this vulnerability, an attacker needs to craft a malicious JWT token containing the HS256 algorithm, signed with the public RSA key of the victim application. This attack will only work against this library is the RS256 algorithm is in use, however it is a best practice to use that algorithm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/joaquimserafim/json-web-token/security/advisories/GHSA-4xw9-cx39-r355
CVE ID: CVE-2023-48239 State: PUBLISHED Published: 2023-11-21T21:02:35.442Z Last Updated: 2025-06-10T13:59:10.422Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H) Vendors: nextcloud Products: security-advisories Problem Types: CWE-284 Description: Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Server and starting in version 20.0.0 and prior to versions 20.0.14.16, 21.0.9.13, 22.2.10.15, 23.0.12.12, 24.0.12.8, 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Enterprise Server, a malicious user could update any personal or global external storage, makin
and 27.1.3 of Nextcloud Enterprise Server, a malicious user could update any personal or global external storage, making them inaccessible for everyone else as well. Nextcloud Server 25.0.13, 26.0.8, and 27.1.3 and Nextcloud Enterprise Server is upgraded to 20.0.14.16, 21.0.9.13, 22.2.10.15, 23.0.12.12, 24.0.12.8, 25.0.13, 26.0.8, and 27.1.3 contain a patch for this issue. As a workaround, disable app files_external. This workaround also makes the external storage inaccessible but retains the configurations until a patched version has been deployed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/security-advisories/secu
s: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-f962-hw26-g267 - https://github.com/nextcloud/server/pull/41123 - https://hackerone.com/reports/2212627
CVE ID: CVE-2023-48240 State: PUBLISHED Published: 2023-11-20T17:48:03.447Z Last Updated: 2024-08-02T21:23:39.265Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: xwiki Products: xwiki-platform Problem Types: CWE-201, CWE-281, CWE-918 Description: XWiki Platform is a generic wiki platform. The rendered diff in XWiki embeds images to be able to compare the contents and not display a difference for an actually unchanged image. For this, XWiki requests all embedded images on the server side. These requests are also sent for images from other domains and include all cookies that were sent in the original request to ensure that images with restricted view right
domains and include all cookies that were sent in the original request to ensure that images with restricted view right can be compared. Starting in version 11.10.1 and prior to versions 14.10.15, 15.5.1, and 15.6, this allows an attacker to steal login and session cookies that allow impersonating the current user who views the diff. The attack can be triggered with an image that references the rendered diff, thus making it easy to trigger. Apart from stealing login cookies, this also allows server-side request forgery (the result of any successful request is returned in the image's source) and viewing protected content as once a resource is cached, it is returned for all users. As only suc
he image's source) and viewing protected content as once a resource is cached, it is returned for all users. As only successful requests are cached, the cache will be filled by the first user who is allowed to access the resource. This has been patched in XWiki 14.10.15, 15.5.1 and 15.6. The rendered diff now only downloads images from trusted domains. Further, cookies are only sent when the image's domain is the same the requested domain. The cache has been changed to be specific for each user. As a workaround, the image embedding feature can be disabled by deleting `xwiki-platform-diff-xml-<version>.jar` in `WEB-INF/lib/`. Additional Analyst Notes: - CVE Program Container: References: - ht
-platform-diff-xml-<version>.jar` in `WEB-INF/lib/`. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-7rfg-6273-f5wp - https://github.com/xwiki/xwiki-platform/commit/bff0203e739b6e3eb90af5736f04278c73c2a8bb - https://jira.xwiki.org/browse/XWIKI-20818
CVE ID: CVE-2023-48241 State: PUBLISHED Published: 2023-11-20T17:58:54.651Z Last Updated: 2024-08-02T21:23:39.426Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: xwiki Products: xwiki-platform Problem Types: CWE-285 Description: XWiki Platform is a generic wiki platform. Starting in version 6.3-milestone-2 and prior to versions 14.10.15, 15.5.1, and 15.6RC1, the Solr-based search suggestion provider that also duplicates as generic JavaScript API for search results in XWiki exposes the content of all documents of all wikis to anybody who has access to it, by default it is public. This exposes all information stored in the wiki (but not some protected informati
access to it, by default it is public. This exposes all information stored in the wiki (but not some protected information like password hashes). While there is a right check normally, the right check can be circumvented by explicitly requesting fields from Solr that don't include the data for the right check. This has been fixed in XWiki 15.6RC1, 15.5.1 and 14.10.15 by not listing documents whose rights cannot be checked. No known workarounds are available. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-7fqr-97j7-jgf4 - https://github.com/xwiki/xwiki-platform/commit/93b8ec702d7075f0f5794bb05dfb651382596764 -
isories/GHSA-7fqr-97j7-jgf4 - https://github.com/xwiki/xwiki-platform/commit/93b8ec702d7075f0f5794bb05dfb651382596764 - https://jira.xwiki.org/browse/XWIKI-21138
CVE ID: CVE-2023-48242 State: PUBLISHED Published: 2024-01-10T10:35:25.216Z Last Updated: 2025-06-17T20:59:12.176Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Rexroth Products: Nexo cordless nutrunner NXA015S-36V (0608842001), Nexo cordless nutrunner NXA030S-36V (0608842002), Nexo cordless nutrunner NXA050S-36V (0608842003), Nexo cordless nutrunner NXP012QD-36V (0608842005), Nexo cordless nutrunner NXA015S-36V-B (0608842006), Nexo cordless nutrunner NXA030S-36V-B (0608842007), Nexo cordless nutrunner NXA050S-36V-B (0608842008), Nexo cordless nutrunner NXP012QD-36V-B (0608842010), Nexo cordless nutrunner NXA011S-36V (0608842011), Nexo cordless nutrunner N
dless nutrunner NXP012QD-36V-B (0608842010), Nexo cordless nutrunner NXA011S-36V (0608842011), Nexo cordless nutrunner NXA011S-36V-B (0608842012), Nexo cordless nutrunner NXA065S-36V (0608842013), Nexo cordless nutrunner NXA065S-36V-B (0608842014), Nexo cordless nutrunner NXV012T-36V (0608842015), Nexo cordless nutrunner NXV012T-36V-B (0608842016), Nexo special cordless nutrunner (0608PE2272), Nexo special cordless nutrunner (0608PE2301), Nexo special cordless nutrunner (0608PE2514), Nexo special cordless nutrunner (0608PE2515), Nexo special cordless nutrunner (0608PE2666), Nexo special cordless nutrunner (0608PE2673) Problem Types: CWE-22 Description: The vulnerability allows an authenticat
Nexo special cordless nutrunner (0608PE2673) Problem Types: CWE-22 Description: The vulnerability allows an authenticated remote attacker to download arbitrary files in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.bosch.com/security-advisories/BOSCH-SA-711465.html
CVE ID: CVE-2023-48243 State: PUBLISHED Published: 2024-01-10T10:36:56.971Z Last Updated: 2025-06-17T20:59:12.299Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: Rexroth Products: Nexo cordless nutrunner NXA015S-36V (0608842001), Nexo cordless nutrunner NXA030S-36V (0608842002), Nexo cordless nutrunner NXA050S-36V (0608842003), Nexo cordless nutrunner NXP012QD-36V (0608842005), Nexo cordless nutrunner NXA015S-36V-B (0608842006), Nexo cordless nutrunner NXA030S-36V-B (0608842007), Nexo cordless nutrunner NXA050S-36V-B (0608842008), Nexo cordless nutrunner NXP012QD-36V-B (0608842010), Nexo cordless nutrunner NXA011S-36V (0608842011), Nexo cordless nutrunner NXA
ess nutrunner NXP012QD-36V-B (0608842010), Nexo cordless nutrunner NXA011S-36V (0608842011), Nexo cordless nutrunner NXA011S-36V-B (0608842012), Nexo cordless nutrunner NXA065S-36V (0608842013), Nexo cordless nutrunner NXA065S-36V-B (0608842014), Nexo cordless nutrunner NXV012T-36V (0608842015), Nexo cordless nutrunner NXV012T-36V-B (0608842016), Nexo special cordless nutrunner (0608PE2272), Nexo special cordless nutrunner (0608PE2301), Nexo special cordless nutrunner (0608PE2514), Nexo special cordless nutrunner (0608PE2515), Nexo special cordless nutrunner (0608PE2666), Nexo special cordless nutrunner (0608PE2673) Problem Types: CWE-22 Description: The vulnerability allows a remote attacke
exo special cordless nutrunner (0608PE2673) Problem Types: CWE-22 Description: The vulnerability allows a remote attacker to upload arbitrary files in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request. By abusing this vulnerability, it is possible to obtain remote code execution (RCE) with root privileges on the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.bosch.com/security-advisories/BOSCH-SA-711465.html
CVE ID: CVE-2023-48244 State: PUBLISHED Published: 2024-01-10T10:37:55.300Z Last Updated: 2025-06-17T20:59:12.411Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Rexroth Products: Nexo cordless nutrunner NXA015S-36V (0608842001), Nexo cordless nutrunner NXA030S-36V (0608842002), Nexo cordless nutrunner NXA050S-36V (0608842003), Nexo cordless nutrunner NXP012QD-36V (0608842005), Nexo cordless nutrunner NXA015S-36V-B (0608842006), Nexo cordless nutrunner NXA030S-36V-B (0608842007), Nexo cordless nutrunner NXA050S-36V-B (0608842008), Nexo cordless nutrunner NXP012QD-36V-B (0608842010), Nexo cordless nutrunner NXA011S-36V (0608842011), Nexo cordless nutrunner N
dless nutrunner NXP012QD-36V-B (0608842010), Nexo cordless nutrunner NXA011S-36V (0608842011), Nexo cordless nutrunner NXA011S-36V-B (0608842012), Nexo cordless nutrunner NXA065S-36V (0608842013), Nexo cordless nutrunner NXA065S-36V-B (0608842014), Nexo cordless nutrunner NXV012T-36V (0608842015), Nexo cordless nutrunner NXV012T-36V-B (0608842016), Nexo special cordless nutrunner (0608PE2272), Nexo special cordless nutrunner (0608PE2301), Nexo special cordless nutrunner (0608PE2514), Nexo special cordless nutrunner (0608PE2515), Nexo special cordless nutrunner (0608PE2666), Nexo special cordless nutrunner (0608PE2673) Problem Types: CWE-79 Description: The vulnerability allows a remote attac
Nexo special cordless nutrunner (0608PE2673) Problem Types: CWE-79 Description: The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s session via a crafted URL or HTTP request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.bosch.com/security-advisories/BOSCH-SA-711465.html
CVE ID: CVE-2023-48245 State: PUBLISHED Published: 2024-01-10T10:38:46.846Z Last Updated: 2025-06-17T20:59:12.535Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Rexroth Products: Nexo cordless nutrunner NXA015S-36V (0608842001), Nexo cordless nutrunner NXA030S-36V (0608842002), Nexo cordless nutrunner NXA050S-36V (0608842003), Nexo cordless nutrunner NXP012QD-36V (0608842005), Nexo cordless nutrunner NXA015S-36V-B (0608842006), Nexo cordless nutrunner NXA030S-36V-B (0608842007), Nexo cordless nutrunner NXA050S-36V-B (0608842008), Nexo cordless nutrunner NXP012QD-36V-B (0608842010), Nexo cordless nutrunner NXA011S-36V (0608842011), Nexo cordless nutrunner N
dless nutrunner NXP012QD-36V-B (0608842010), Nexo cordless nutrunner NXA011S-36V (0608842011), Nexo cordless nutrunner NXA011S-36V-B (0608842012), Nexo cordless nutrunner NXA065S-36V (0608842013), Nexo cordless nutrunner NXA065S-36V-B (0608842014), Nexo cordless nutrunner NXV012T-36V (0608842015), Nexo cordless nutrunner NXV012T-36V-B (0608842016), Nexo special cordless nutrunner (0608PE2272), Nexo special cordless nutrunner (0608PE2301), Nexo special cordless nutrunner (0608PE2514), Nexo special cordless nutrunner (0608PE2515), Nexo special cordless nutrunner (0608PE2666), Nexo special cordless nutrunner (0608PE2673) Problem Types: CWE-862 Description: The vulnerability allows an unauthenti
Nexo special cordless nutrunner (0608PE2673) Problem Types: CWE-862 Description: The vulnerability allows an unauthenticated remote attacker to upload arbitrary files under the context of the application OS user (“root”) via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.bosch.com/security-advisories/BOSCH-SA-711465.html
CVE ID: CVE-2023-48246 State: PUBLISHED Published: 2024-01-10T10:39:30.602Z Last Updated: 2025-06-17T20:59:12.689Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Rexroth Products: Nexo cordless nutrunner NXA015S-36V (0608842001), Nexo cordless nutrunner NXA030S-36V (0608842002), Nexo cordless nutrunner NXA050S-36V (0608842003), Nexo cordless nutrunner NXP012QD-36V (0608842005), Nexo cordless nutrunner NXA015S-36V-B (0608842006), Nexo cordless nutrunner NXA030S-36V-B (0608842007), Nexo cordless nutrunner NXA050S-36V-B (0608842008), Nexo cordless nutrunner NXP012QD-36V-B (0608842010), Nexo cordless nutrunner NXA011S-36V (0608842011), Nexo cordless nutrunner N
dless nutrunner NXP012QD-36V-B (0608842010), Nexo cordless nutrunner NXA011S-36V (0608842011), Nexo cordless nutrunner NXA011S-36V-B (0608842012), Nexo cordless nutrunner NXA065S-36V (0608842013), Nexo cordless nutrunner NXA065S-36V-B (0608842014), Nexo cordless nutrunner NXV012T-36V (0608842015), Nexo cordless nutrunner NXV012T-36V-B (0608842016), Nexo special cordless nutrunner (0608PE2272), Nexo special cordless nutrunner (0608PE2301), Nexo special cordless nutrunner (0608PE2514), Nexo special cordless nutrunner (0608PE2515), Nexo special cordless nutrunner (0608PE2666), Nexo special cordless nutrunner (0608PE2673) Problem Types: CWE-22 Description: The vulnerability allows a remote attac
Nexo special cordless nutrunner (0608PE2673) Problem Types: CWE-22 Description: The vulnerability allows a remote attacker to download arbitrary files in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.bosch.com/security-advisories/BOSCH-SA-711465.html
CVE ID: CVE-2023-48247 State: PUBLISHED Published: 2024-01-10T10:40:20.260Z Last Updated: 2025-06-17T20:59:12.865Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Rexroth Products: Nexo cordless nutrunner NXA015S-36V (0608842001), Nexo cordless nutrunner NXA030S-36V (0608842002), Nexo cordless nutrunner NXA050S-36V (0608842003), Nexo cordless nutrunner NXP012QD-36V (0608842005), Nexo cordless nutrunner NXA015S-36V-B (0608842006), Nexo cordless nutrunner NXA030S-36V-B (0608842007), Nexo cordless nutrunner NXA050S-36V-B (0608842008), Nexo cordless nutrunner NXP012QD-36V-B (0608842010), Nexo cordless nutrunner NXA011S-36V (0608842011), Nexo cordless nutrunner N
Nexo special cordless nutrunner (0608PE2673) Problem Types: CWE-862 Description: The vulnerability allows an unauthenticated remote attacker to read arbitrary files under the context of the application OS user (“root”) via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.bosch.com/security-advisories/BOSCH-SA-711465.html
CVE ID: CVE-2023-48248 State: PUBLISHED Published: 2024-01-10T10:41:20.413Z Last Updated: 2025-06-17T20:59:13.000Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: Rexroth Products: Nexo cordless nutrunner NXA015S-36V (0608842001), Nexo cordless nutrunner NXA030S-36V (0608842002), Nexo cordless nutrunner NXA050S-36V (0608842003), Nexo cordless nutrunner NXP012QD-36V (0608842005), Nexo cordless nutrunner NXA015S-36V-B (0608842006), Nexo cordless nutrunner NXA030S-36V-B (0608842007), Nexo cordless nutrunner NXA050S-36V-B (0608842008), Nexo cordless nutrunner NXP012QD-36V-B (0608842010), Nexo cordless nutrunner NXA011S-36V (0608842011), Nexo cordless nutrunner N
dless nutrunner NXP012QD-36V-B (0608842010), Nexo cordless nutrunner NXA011S-36V (0608842011), Nexo cordless nutrunner NXA011S-36V-B (0608842012), Nexo cordless nutrunner NXA065S-36V (0608842013), Nexo cordless nutrunner NXA065S-36V-B (0608842014), Nexo cordless nutrunner NXV012T-36V (0608842015), Nexo cordless nutrunner NXV012T-36V-B (0608842016), Nexo special cordless nutrunner (0608PE2272), Nexo special cordless nutrunner (0608PE2301), Nexo special cordless nutrunner (0608PE2514), Nexo special cordless nutrunner (0608PE2515), Nexo special cordless nutrunner (0608PE2666), Nexo special cordless nutrunner (0608PE2673) Problem Types: CWE-79 Description: The vulnerability allows an authenticat
Nexo special cordless nutrunner (0608PE2673) Problem Types: CWE-79 Description: The vulnerability allows an authenticated remote attacker to upload a malicious file to the SD card containing arbitrary client-side script code and obtain its execution inside a victim’s session via a crafted URL, HTTP request, or simply by waiting for the victim to view the poisoned file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.bosch.com/security-advisories/BOSCH-SA-711465.html
CVE ID: CVE-2023-48249 State: PUBLISHED Published: 2024-01-10T10:42:03.673Z Last Updated: 2025-06-17T20:59:13.141Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Rexroth Products: Nexo cordless nutrunner NXA015S-36V (0608842001), Nexo cordless nutrunner NXA030S-36V (0608842002), Nexo cordless nutrunner NXA050S-36V (0608842003), Nexo cordless nutrunner NXP012QD-36V (0608842005), Nexo cordless nutrunner NXA015S-36V-B (0608842006), Nexo cordless nutrunner NXA030S-36V-B (0608842007), Nexo cordless nutrunner NXA050S-36V-B (0608842008), Nexo cordless nutrunner NXP012QD-36V-B (0608842010), Nexo cordless nutrunner NXA011S-36V (0608842011), Nexo cordless nutrunner N
Nexo special cordless nutrunner (0608PE2673) Problem Types: CWE-22 Description: The vulnerability allows an authenticated remote attacker to list arbitrary folders in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request. By abusing this vulnerability, it is possible to steal session cookies of other active users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.bosch.com/security-advisories/BOSCH-SA-711465.html
CVE ID: CVE-2023-48250 State: PUBLISHED Published: 2024-01-10T10:43:24.818Z Last Updated: 2025-06-17T20:59:13.277Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Rexroth Products: Nexo cordless nutrunner NXA015S-36V (0608842001), Nexo cordless nutrunner NXA030S-36V (0608842002), Nexo cordless nutrunner NXA050S-36V (0608842003), Nexo cordless nutrunner NXP012QD-36V (0608842005), Nexo cordless nutrunner NXA015S-36V-B (0608842006), Nexo cordless nutrunner NXA030S-36V-B (0608842007), Nexo cordless nutrunner NXA050S-36V-B (0608842008), Nexo cordless nutrunner NXP012QD-36V-B (0608842010), Nexo cordless nutrunner NXA011S-36V (0608842011), Nexo cordless nutrunner NXA
ess nutrunner NXP012QD-36V-B (0608842010), Nexo cordless nutrunner NXA011S-36V (0608842011), Nexo cordless nutrunner NXA011S-36V-B (0608842012), Nexo cordless nutrunner NXA065S-36V (0608842013), Nexo cordless nutrunner NXA065S-36V-B (0608842014), Nexo cordless nutrunner NXV012T-36V (0608842015), Nexo cordless nutrunner NXV012T-36V-B (0608842016), Nexo special cordless nutrunner (0608PE2272), Nexo special cordless nutrunner (0608PE2301), Nexo special cordless nutrunner (0608PE2514), Nexo special cordless nutrunner (0608PE2515), Nexo special cordless nutrunner (0608PE2666), Nexo special cordless nutrunner (0608PE2673) Problem Types: CWE-798 Description: The vulnerability allows a remote attack
exo special cordless nutrunner (0608PE2673) Problem Types: CWE-798 Description: The vulnerability allows a remote attacker to authenticate to the web application with high privileges through multiple hidden hard-coded accounts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.bosch.com/security-advisories/BOSCH-SA-711465.html
CVE ID: CVE-2023-48251 State: PUBLISHED Published: 2024-01-10T13:00:29.554Z Last Updated: 2025-06-17T20:59:13.437Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Rexroth Products: Nexo cordless nutrunner NXA015S-36V (0608842001), Nexo cordless nutrunner NXA030S-36V (0608842002), Nexo cordless nutrunner NXA050S-36V (0608842003), Nexo cordless nutrunner NXP012QD-36V (0608842005), Nexo cordless nutrunner NXA015S-36V-B (0608842006), Nexo cordless nutrunner NXA030S-36V-B (0608842007), Nexo cordless nutrunner NXA050S-36V-B (0608842008), Nexo cordless nutrunner NXP012QD-36V-B (0608842010), Nexo cordless nutrunner NXA011S-36V (0608842011), Nexo cordless nutrunner NXA
exo special cordless nutrunner (0608PE2673) Problem Types: CWE-798 Description: The vulnerability allows a remote attacker to authenticate to the SSH service with root privileges through a hidden hard-coded account. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.bosch.com/security-advisories/BOSCH-SA-711465.html
CVE ID: CVE-2023-48252 State: PUBLISHED Published: 2024-01-10T13:01:35.579Z Last Updated: 2025-06-17T20:59:13.576Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Rexroth Products: Nexo cordless nutrunner NXA015S-36V (0608842001), Nexo cordless nutrunner NXA030S-36V (0608842002), Nexo cordless nutrunner NXA050S-36V (0608842003), Nexo cordless nutrunner NXP012QD-36V (0608842005), Nexo cordless nutrunner NXA015S-36V-B (0608842006), Nexo cordless nutrunner NXA030S-36V-B (0608842007), Nexo cordless nutrunner NXA050S-36V-B (0608842008), Nexo cordless nutrunner NXP012QD-36V-B (0608842010), Nexo cordless nutrunner NXA011S-36V (0608842011), Nexo cordless nutrunner NXA