rainbutterfly/cve_corpus huggingface dataset:
CVE-2023-48245 
The vulnerability allows an unauthenticated remote attacker to upload arbitrary files under the context of the application OS user (“root”) via a crafted HTTP request.
Problem types: cwe_id: CWE-862
description: CWE-862 Missing Authorization
Affected products: vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V (0608842001)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V (0608842002)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V (0608842003)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V (0608842005)
vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V-B (0608842006)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V-B (0608842007)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V-B (0608842008)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V-B (0608842010)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V (0608842011)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V-B (0608842012)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V (0608842013)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V-B (0608842014)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V (0608842015)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V-B (0608842016)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2272)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2301)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2514)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2515)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2666)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2673)
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: LOW
availabilityImpact: LOW
baseScore: 6.5
baseSeverity: MEDIUM
Published: 2024-01-10T10:38:46.846Z
CVE-2023-48246 
The vulnerability allows a remote attacker to download arbitrary files in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request.
Problem types: cwe_id: CWE-22
description: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V (0608842001)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V (0608842002)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V (0608842003)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V (0608842005)
vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V-B (0608842006)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V-B (0608842007)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V-B (0608842008)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V-B (0608842010)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V (0608842011)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V-B (0608842012)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V (0608842013)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V-B (0608842014)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V (0608842015)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V-B (0608842016)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2272)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2301)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2514)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2515)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2666)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2673)
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
Published: 2024-01-10T10:39:30.602Z
CVE-2023-48247 
The vulnerability allows an unauthenticated remote attacker to read arbitrary files under the context of the application OS user (“root”) via a crafted HTTP request.
Problem types: cwe_id: CWE-862
description: CWE-862 Missing Authorization
Affected products: vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V (0608842001)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V (0608842002)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V (0608842003)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V (0608842005)
vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V-B (0608842006)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V-B (0608842007)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V-B (0608842008)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V-B (0608842010)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V (0608842011)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V-B (0608842012)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V (0608842013)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V-B (0608842014)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V (0608842015)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V-B (0608842016)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2272)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2301)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2514)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2515)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2666)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2673)
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
Published: 2024-01-10T10:40:20.260Z
CVE-2023-48248 
The vulnerability allows an authenticated remote attacker to upload a malicious file to the SD card containing arbitrary client-side script code and obtain its execution inside a victim’s session via a crafted URL, HTTP request, or simply by waiting for the victim to view the poisoned file.
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V (0608842001)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V (0608842002)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V (0608842003)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V (0608842005)
vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V-B (0608842006)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V-B (0608842007)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V-B (0608842008)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V-B (0608842010)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V (0608842011)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V-B (0608842012)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V (0608842013)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V-B (0608842014)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V (0608842015)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V-B (0608842016)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2272)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2301)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2514)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2515)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2666)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2673)
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: LOW
baseScore: 5.5
baseSeverity: MEDIUM
Published: 2024-01-10T10:41:20.413Z
CVE-2023-48249 
The vulnerability allows an authenticated remote attacker to list arbitrary folders in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request.

By abusing this vulnerability, it is possible to steal session cookies of other active users.
Problem types: cwe_id: CWE-22
description: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V (0608842001)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V (0608842002)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V (0608842003)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V (0608842005)
vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V-B (0608842006)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V-B (0608842007)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V-B (0608842008)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V-B (0608842010)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V (0608842011)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V-B (0608842012)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V (0608842013)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V-B (0608842014)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V (0608842015)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V-B (0608842016)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2272)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2301)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2514)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2515)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2666)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2673)
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
Published: 2024-01-10T10:42:03.673Z
CVE-2023-48250 
The vulnerability allows a remote attacker to authenticate to the web application with high privileges through multiple hidden hard-coded accounts.
Problem types: cwe_id: CWE-798
description: CWE-798 Use of Hard-coded Credentials
Affected products: vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V (0608842001)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V (0608842002)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V (0608842003)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V (0608842005)
vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V-B (0608842006)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V-B (0608842007)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V-B (0608842008)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V-B (0608842010)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V (0608842011)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V-B (0608842012)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V (0608842013)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V-B (0608842014)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V (0608842015)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V-B (0608842016)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2272)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2301)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2514)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2515)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2666)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2673)
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 8.1
baseSeverity: HIGH
Published: 2024-01-10T10:43:24.818Z
CVE-2023-48251 
The vulnerability allows a remote attacker to authenticate to the SSH service with root privileges through a hidden hard-coded account.
Problem types: cwe_id: CWE-798
description: CWE-798 Use of Hard-coded Credentials
Affected products: vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V (0608842001)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V (0608842002)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V (0608842003)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V (0608842005)
vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V-B (0608842006)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V-B (0608842007)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V-B (0608842008)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V-B (0608842010)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V (0608842011)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V-B (0608842012)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V (0608842013)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V-B (0608842014)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V (0608842015)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V-B (0608842016)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2272)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2301)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2514)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2515)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2666)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2673)
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 8.1
baseSeverity: HIGH
Published: 2024-01-10T13:00:29.554Z
CVE-2023-48252 
The vulnerability allows an authenticated remote attacker to perform actions exceeding their authorized access via crafted HTTP requests.
Problem types: cwe_id: CWE-285
description: CWE-285 Improper Authorization
Affected products: vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V (0608842001)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V (0608842002)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V (0608842003)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V (0608842005)
vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V-B (0608842006)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V-B (0608842007)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V-B (0608842008)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V-B (0608842010)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V (0608842011)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V-B (0608842012)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V (0608842013)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V-B (0608842014)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V (0608842015)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V-B (0608842016)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2272)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2301)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2514)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2515)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2666)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2673)
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
Published: 2024-01-10T13:01:35.579Z
CVE-2023-48253 
The vulnerability allows a remote authenticated attacker to read or update arbitrary content of the authentication database via a crafted HTTP request.
By abusing this vulnerability it is possible to exfiltrate other users’ password hashes or update them with arbitrary values and access their accounts.
Problem types: cwe_id: CWE-89
description: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V (0608842001)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V (0608842002)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V (0608842003)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V (0608842005)
vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V-B (0608842006)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V-B (0608842007)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V-B (0608842008)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V-B (0608842010)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V (0608842011)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V-B (0608842012)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V (0608842013)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V-B (0608842014)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V (0608842015)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V-B (0608842016)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2272)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2301)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2514)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2515)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2666)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2673)
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
Published: 2024-01-10T13:02:19.652Z
CVE-2023-48254 
The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s session via a crafted URL or HTTP request.
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V (0608842001)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V (0608842002)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V (0608842003)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V (0608842005)
vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V-B (0608842006)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V-B (0608842007)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V-B (0608842008)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V-B (0608842010)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V (0608842011)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V-B (0608842012)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V (0608842013)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V-B (0608842014)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V (0608842015)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V-B (0608842016)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2272)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2301)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2514)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2515)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2666)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2673)
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: LOW
baseScore: 5.3
baseSeverity: MEDIUM
Published: 2024-01-10T13:02:51.682Z
CVE-2023-48255 
The vulnerability allows an unauthenticated remote attacker to send malicious network requests containing arbitrary client-side script code and obtain its execution inside a victim’s session via a crafted URL, HTTP request, or simply by waiting for the victim to view the poisoned log.
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V (0608842001)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V (0608842002)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V (0608842003)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V (0608842005)
vendor: Rexroth
product: Nexo cordless nutrunner NXA015S-36V-B (0608842006)
vendor: Rexroth
product: Nexo cordless nutrunner NXA030S-36V-B (0608842007)
vendor: Rexroth
product: Nexo cordless nutrunner NXA050S-36V-B (0608842008)
vendor: Rexroth
product: Nexo cordless nutrunner NXP012QD-36V-B (0608842010)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V (0608842011)
vendor: Rexroth
product: Nexo cordless nutrunner NXA011S-36V-B (0608842012)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V (0608842013)
vendor: Rexroth
product: Nexo cordless nutrunner NXA065S-36V-B (0608842014)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V (0608842015)
vendor: Rexroth
product: Nexo cordless nutrunner NXV012T-36V-B (0608842016)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2272)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2301)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2514)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2515)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2666)
vendor: Rexroth
product: Nexo special cordless nutrunner (0608PE2673)
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: LOW
baseScore: 6.3
baseSeverity: MEDIUM
Published: 2024-01-10T13:03:32.151Z