← Back

Nexo Os

nexo-os

Vendor: Bosch • 25 CVEs

CVEs (25)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-48246
1Bosch
1Nexo Os
Jun 17, 2026
Jan 10, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
The vulnerability allows a remote attacker to download arbitrary files in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request.
CVE-2023-48245
1Bosch
1Nexo Os
Jun 17, 2026
Jan 10, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
The vulnerability allows an unauthenticated remote attacker to upload arbitrary files under the context of the application OS user (“root”) via a crafted HTTP request.
CVE-2023-48244
1Bosch
1Nexo Os
Jun 17, 2026
Jan 10, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s session via a crafted URL or HTTP request.
CVE-2023-48243
1Bosch
1Nexo Os
Jun 17, 2026
Jan 10, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
The vulnerability allows a remote attacker to upload arbitrary files in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request. By abusing this vulnerability, it is poss...Show more
The vulnerability allows a remote attacker to upload arbitrary files in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request. By abusing this vulnerability, it is possible to obtain remote code execution (RCE) with root privileges on the device.Show less
CVE-2023-48242
1Bosch
1Nexo Os
Jun 17, 2026
Jan 10, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
The vulnerability allows an authenticated remote attacker to download arbitrary files in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request.