← Back

CVE-2023-48258

nvd nist
Published: Jan 10, 2024Modified: Jun 17, 2026

JSON object

Loading...
8.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
Exploitability: 2.8 / Impact: 5.2
Source: NVD

Description

The vulnerability allows a remote attacker to delete arbitrary files on the file system via a crafted URL or HTTP request through a victim’s session.

Affected (1)

Products: Bosch: Nexo Os
Bosch
1 product
Nexo Os
Configuration A
1 vulnerable · 20 platform
Vulnerable SoftwareAffected Versions
Nexo Os
From 1000 to 1500-sp2
Running on/withPlatform Versions
Bosch
Nexo Cordless Nutrunner Nxa011s 36v B (0608842012)
All versions
Bosch
Nexo Cordless Nutrunner Nxa011s 36v (0608842011)
All versions
Bosch
Nexo Cordless Nutrunner Nxa015s 36v B (0608842006)
All versions
Bosch
Nexo Cordless Nutrunner Nxa015s 36v (0608842001)
All versions
Bosch
Nexo Cordless Nutrunner Nxa030s 36v B (0608842007)
All versions
Bosch
Nexo Cordless Nutrunner Nxa030s 36v (0608842002)
All versions
Bosch
Nexo Cordless Nutrunner Nxa050s 36v B (0608842008)
All versions
Bosch
Nexo Cordless Nutrunner Nxa050s 36v (0608842003)
All versions
Bosch
Nexo Cordless Nutrunner Nxa065s 36v B (0608842014)
All versions
Bosch
Nexo Cordless Nutrunner Nxa065s 36v (0608842013)
All versions
Bosch
Nexo Cordless Nutrunner Nxp012qd 36v B (0608842010)
All versions
Bosch
Nexo Cordless Nutrunner Nxp012qd 36v (0608842005)
All versions
Bosch
Nexo Cordless Nutrunner Nxv012t 36v B (0608842016)
All versions
Bosch
Nexo Cordless Nutrunner Nxv012t 36v (0608842015)
All versions
Bosch
Nexo Special Cordless Nutrunner (0608pe2272)
All versions
Bosch
Nexo Special Cordless Nutrunner (0608pe2301)
All versions
Bosch
Nexo Special Cordless Nutrunner (0608pe2514)
All versions
Bosch
Nexo Special Cordless Nutrunner (0608pe2515)
All versions
Bosch
Nexo Special Cordless Nutrunner (0608pe2666)
All versions
Bosch
Nexo Special Cordless Nutrunner (0608pe2673)
All versions

Related CWEs

CWE-352
Cross-Site Request Forgery (CSRF)
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (2)

Source: psirt@bosch.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.