CVE Feed

    Dashboard / CVE / CVE-2023-48242

    CVE-2023-48242

    The vulnerability allows an authenticated remote attacker to download arbitrary files in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request.

    Published:Jan 10, 2024
    Last Modified:Jun 17, 2025
    EPS:Jan 10, 2024
    EPSS Score:0.00268
    CVSS Score:6.5

    Affected Products

    Vendor
    Bosch
    Product
    Nexo-os
    Vendor
    Bosch
    Product
    Nexo Cordless Nutrunner Nxa011s-36v-b \(0608842012\)
    Vendor
    Bosch
    Product
    Nexo Cordless Nutrunner Nxa011s-36v \(0608842011\)
    Vendor
    Bosch
    Product
    Nexo Cordless Nutrunner Nxa015s-36v-b \(0608842006\)
    Vendor
    Bosch
    Product
    Nexo Cordless Nutrunner Nxa015s-36v \(0608842001\)
    Vendor
    Bosch
    Product
    Nexo Cordless Nutrunner Nxa030s-36v-b \(0608842007\)
    Vendor
    Bosch
    Product
    Nexo Cordless Nutrunner Nxa030s-36v \(0608842002\)
    Vendor
    Bosch
    Product
    Nexo Cordless Nutrunner Nxa050s-36v-b \(0608842008\)
    Vendor
    Bosch
    Product
    Nexo Cordless Nutrunner Nxa050s-36v \(0608842003\)
    Vendor
    Bosch
    Product
    Nexo Cordless Nutrunner Nxa065s-36v-b \(0608842014\)
    Vendor
    Bosch
    Product
    Nexo Cordless Nutrunner Nxa065s-36v \(0608842013\)
    Vendor
    Bosch
    Product
    Nexo Cordless Nutrunner Nxp012qd-36v-b \(0608842010\)
    Vendor
    Bosch
    Product
    Nexo Cordless Nutrunner Nxp012qd-36v \(0608842005\)
    Vendor
    Bosch
    Product
    Nexo Cordless Nutrunner Nxv012t-36v-b \(0608842016\)
    Vendor
    Bosch
    Product
    Nexo Cordless Nutrunner Nxv012t-36v \(0608842015\)
    Vendor
    Bosch
    Product
    Nexo Special Cordless Nutrunner \(0608pe2272\)
    Vendor
    Bosch
    Product
    Nexo Special Cordless Nutrunner \(0608pe2301\)
    Vendor
    Bosch
    Product
    Nexo Special Cordless Nutrunner \(0608pe2514\)
    Vendor
    Bosch
    Product
    Nexo Special Cordless Nutrunner \(0608pe2515\)
    Vendor
    Bosch
    Product
    Nexo Special Cordless Nutrunner \(0608pe2666\)
    Vendor
    Bosch
    Product
    Nexo Special Cordless Nutrunner \(0608pe2673\)

    Exploits

    No exploit reference

    Related CVEs

    CVE-2023-48266 (CVSS 8.1) — The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, po…
    CVE-2023-48265 (CVSS 8.1) — The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, po…
    CVE-2023-48264 (CVSS 8.1) — The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, po…
    CVE-2023-48263 (CVSS 8.1) — The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, po…
    CVE-2023-48262 (CVSS 8.1) — The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, po…
    CVE-2023-48261 (CVSS 5.3) — The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database v…
    CVE-2023-48260 (CVSS 5.3) — The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database v…
    CVE-2023-48259 (CVSS 5.3) — The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database v…
    CVE-2023-48258 (CVSS 5.5) — The vulnerability allows a remote attacker to delete arbitrary files on the file system via a crafted URL or H…
    CVE-2023-48257 (CVSS 7.8) — The vulnerability allows a remote attacker to access sensitive data inside exported packages or obtain up to R…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High