Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2023-48253

The vulnerability allows a remote authenticated attacker to read or update arbitrary content of the authentication database via a crafted HTTP request.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
bosch

Description

The vulnerability allows a remote authenticated attacker to read or update arbitrary content of the authentication database via a crafted HTTP request. By abusing this vulnerability it is possible to exfiltrate other users’ password hashes or update them with arbitrary values and access their accounts.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)

  • NEXO-OS V1000-Release to ≤ NEXO-OS V1500-SP2affected

Rexroth Nexo cordless nutrunner NXA030S-36V (0608842002)

  • NEXO-OS V1000-Release to ≤ NEXO-OS V1500-SP2affected

Rexroth Nexo cordless nutrunner NXA050S-36V (0608842003)

  • NEXO-OS V1000-Release to ≤ NEXO-OS V1500-SP2affected

Rexroth Nexo cordless nutrunner NXP012QD-36V (0608842005)

  • NEXO-OS V1000-Release to ≤ NEXO-OS V1500-SP2affected

Rexroth Nexo cordless nutrunner NXA015S-36V-B (0608842006)

  • NEXO-OS V1000-Release to ≤ NEXO-OS V1500-SP2affected

Rexroth Nexo cordless nutrunner NXA030S-36V-B (0608842007)

  • NEXO-OS V1000-Release to ≤ NEXO-OS V1500-SP2affected

Rexroth Nexo cordless nutrunner NXA050S-36V-B (0608842008)

  • NEXO-OS V1000-Release to ≤ NEXO-OS V1500-SP2affected

Rexroth Nexo cordless nutrunner NXP012QD-36V-B (0608842010)

  • NEXO-OS V1000-Release to ≤ NEXO-OS V1500-SP2affected

Rexroth Nexo cordless nutrunner NXA011S-36V (0608842011)

  • NEXO-OS V1000-Release to ≤ NEXO-OS V1500-SP2affected

Rexroth Nexo cordless nutrunner NXA011S-36V-B (0608842012)

  • NEXO-OS V1000-Release to ≤ NEXO-OS V1500-SP2affected

Rexroth Nexo cordless nutrunner NXA065S-36V (0608842013)

  • NEXO-OS V1000-Release to ≤ NEXO-OS V1500-SP2affected

Rexroth Nexo cordless nutrunner NXA065S-36V-B (0608842014)

  • NEXO-OS V1000-Release to ≤ NEXO-OS V1500-SP2affected

Rexroth Nexo cordless nutrunner NXV012T-36V (0608842015)

  • NEXO-OS V1000-Release to ≤ NEXO-OS V1500-SP2affected

Rexroth Nexo cordless nutrunner NXV012T-36V-B (0608842016)

  • NEXO-OS V1000-Release to ≤ NEXO-OS V1500-SP2affected

Rexroth Nexo special cordless nutrunner (0608PE2272)

  • NEXO-OS V1000-Release to ≤ NEXO-OS V1500-SP2affected

Rexroth Nexo special cordless nutrunner (0608PE2301)

  • NEXO-OS V1000-Release to ≤ NEXO-OS V1500-SP2affected

Rexroth Nexo special cordless nutrunner (0608PE2514)

  • NEXO-OS V1000-Release to ≤ NEXO-OS V1500-SP2affected

Rexroth Nexo special cordless nutrunner (0608PE2515)

  • NEXO-OS V1000-Release to ≤ NEXO-OS V1500-SP2affected

Rexroth Nexo special cordless nutrunner (0608PE2666)

  • NEXO-OS V1000-Release to ≤ NEXO-OS V1500-SP2affected

Rexroth Nexo special cordless nutrunner (0608PE2673)

  • NEXO-OS V1000-Release to ≤ NEXO-OS V1500-SP2affected

References