rainbutterfly/cve_corpus huggingface dataset:
CVE-2023-48256 
The vulnerability allows a remote attacker to inject arbitrary HTTP response headers or manipulate HTTP response bodies inside a victim’s session via a crafted URL or HTTP request.
Problem types: cwe_id: CWE-113
description: CWE-113 Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
Affected products: vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V (0608842001)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V (0608842002)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V (0608842003)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V (0608842005)
vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V-B (0608842006)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V-B (0608842007)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V-B (0608842008)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V-B (0608842010)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V (0608842011)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V-B (0608842012)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V (0608842013)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V-B (0608842014)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V (0608842015)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V-B (0608842016)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2272)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2301)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2514)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2515)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2666)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2673)
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: LOW
baseScore: 5.3
baseSeverity: MEDIUM
Published: 2024-01-10T13:04:04.926Z
CVE-2023-48257 
The vulnerability allows a remote attacker to access sensitive data inside exported packages or obtain up to Remote Code Execution (RCE) with root privileges on the device. The vulnerability can be exploited directly by authenticated users, via crafted HTTP requests, or indirectly by unauthenticated users, by accessing already-exported backup packages, or crafting an import package and inducing an authenticated victim into sending the HTTP upload request.
Problem types: cwe_id: CWE-1391
description: n/a
Affected products: vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V (0608842001)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V (0608842002)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V (0608842003)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V (0608842005)
vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V-B (0608842006)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V-B (0608842007)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V-B (0608842008)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V-B (0608842010)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V (0608842011)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V-B (0608842012)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V (0608842013)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V-B (0608842014)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V (0608842015)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V-B (0608842016)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2272)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2301)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2514)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2515)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2666)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2673)
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
Published: 2024-01-10T13:04:36.606Z
CVE-2023-48258 
The vulnerability allows a remote attacker to delete arbitrary files on the file system via a crafted URL or HTTP
request through a victim’s session.
Problem types: cwe_id: CWE-352
description: CWE-352 Cross-Site Request Forgery (CSRF)
Affected products: vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V (0608842001)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V (0608842002)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V (0608842003)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V (0608842005)
vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V-B (0608842006)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V-B (0608842007)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V-B (0608842008)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V-B (0608842010)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V (0608842011)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V-B (0608842012)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V (0608842013)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V-B (0608842014)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V (0608842015)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V-B (0608842016)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2272)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2301)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2514)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2515)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2666)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2673)
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
baseScore: 5.5
baseSeverity: MEDIUM
Published: 2024-01-10T13:05:08.294Z
CVE-2023-48259 
The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request.
Problem types: cwe_id: CWE-89
description: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V (0608842001)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V (0608842002)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V (0608842003)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V (0608842005)
vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V-B (0608842006)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V-B (0608842007)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V-B (0608842008)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V-B (0608842010)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V (0608842011)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V-B (0608842012)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V (0608842013)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V-B (0608842014)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V (0608842015)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V-B (0608842016)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2272)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2301)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2514)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2515)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2666)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2673)
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
Published: 2024-01-10T13:05:41.881Z
CVE-2023-48260 
The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request.
Problem types: cwe_id: CWE-89
description: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V (0608842001)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V (0608842002)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V (0608842003)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V (0608842005)
vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V-B (0608842006)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V-B (0608842007)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V-B (0608842008)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V-B (0608842010)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V (0608842011)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V-B (0608842012)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V (0608842013)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V-B (0608842014)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V (0608842015)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V-B (0608842016)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2272)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2301)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2514)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2515)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2666)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2673)
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
Published: 2024-01-10T13:06:48.658Z
CVE-2023-48261 
The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request.
Problem types: cwe_id: CWE-89
description: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V (0608842001)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V (0608842002)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V (0608842003)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V (0608842005)
vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V-B (0608842006)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V-B (0608842007)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V-B (0608842008)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V-B (0608842010)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V (0608842011)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V-B (0608842012)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V (0608842013)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V-B (0608842014)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V (0608842015)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V-B (0608842016)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2272)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2301)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2514)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2515)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2666)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2673)
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
Published: 2024-01-10T13:07:22.893Z
CVE-2023-48262 
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network request.
Problem types: cwe_id: CWE-121
description: CWE-121 Stack-based Buffer Overflow
Affected products: vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V (0608842001)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V (0608842002)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V (0608842003)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V (0608842005)
vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V-B (0608842006)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V-B (0608842007)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V-B (0608842008)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V-B (0608842010)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V (0608842011)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V-B (0608842012)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V (0608842013)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V-B (0608842014)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V (0608842015)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V-B (0608842016)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2272)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2301)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2514)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2515)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2666)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2673)
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 8.1
baseSeverity: HIGH
Published: 2024-01-10T13:08:03.996Z
CVE-2023-48263 
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network request.
Problem types: cwe_id: CWE-122
description: CWE-122 Heap-based Buffer Overflow
Affected products: vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V (0608842001)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V (0608842002)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V (0608842003)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V (0608842005)
vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V-B (0608842006)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V-B (0608842007)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V-B (0608842008)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V-B (0608842010)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V (0608842011)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V-B (0608842012)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V (0608842013)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V-B (0608842014)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V (0608842015)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V-B (0608842016)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2272)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2301)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2514)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2515)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2666)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2673)
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 8.1
baseSeverity: HIGH
Published: 2024-01-10T13:08:37.557Z
CVE-2023-48264 
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network request.
Problem types: cwe_id: CWE-121
description: CWE-121 Stack-based Buffer Overflow
Affected products: vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V (0608842001)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V (0608842002)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V (0608842003)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V (0608842005)
vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V-B (0608842006)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V-B (0608842007)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V-B (0608842008)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V-B (0608842010)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V (0608842011)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V-B (0608842012)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V (0608842013)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V-B (0608842014)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V (0608842015)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V-B (0608842016)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2272)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2301)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2514)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2515)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2666)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2673)
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 8.1
baseSeverity: HIGH
Published: 2024-01-10T13:09:10.347Z
CVE-2023-48265 
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network request.
Problem types: cwe_id: CWE-121
description: CWE-121 Stack-based Buffer Overflow
Affected products: vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V (0608842001)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V (0608842002)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V (0608842003)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V (0608842005)
vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V-B (0608842006)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V-B (0608842007)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V-B (0608842008)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V-B (0608842010)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V (0608842011)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V-B (0608842012)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V (0608842013)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V-B (0608842014)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V (0608842015)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V-B (0608842016)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2272)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2301)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2514)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2515)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2666)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2673)
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 8.1
baseSeverity: HIGH
Published: 2024-01-10T13:09:46.605Z
CVE-2023-48266 
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network request.
Problem types: cwe_id: CWE-121
description: CWE-121 Stack-based Buffer Overflow
Affected products: vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V (0608842001)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V (0608842002)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V (0608842003)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V (0608842005)
vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V-B (0608842006)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V-B (0608842007)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V-B (0608842008)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V-B (0608842010)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V (0608842011)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V-B (0608842012)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V (0608842013)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V-B (0608842014)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V (0608842015)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V-B (0608842016)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2272)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2301)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2514)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2515)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2666)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2673)
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 8.1
baseSeverity: HIGH
Published: 2024-01-10T13:10:15.503Z
CVE-2023-48267 
Improper buffer restrictions in some Intel(R) System Security Report and System Resources Defense firmware may allow a privileged user to potentially enable escalation of privilege via local access.
Problem types: description: Escalation of Privilege
cwe_id: CWE-119
description: Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products: vendor: n/a
product: Intel(R) System Security Report and System Resources Defense firmware
default_status: unaffected
CVSS v3.1: version: 3.1
baseScore: 7.9
baseSeverity: HIGH
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: NONE
Published: 2025-02-12T21:20:14.271Z