Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)

• CVE-2023-48266 High 8.1 The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network request. 0.8%
• CVE-2023-48265 High 8.1 The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network request. 0.8%
• CVE-2023-48264 High 8.1 The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network request. 0.8%
• CVE-2023-48263 High 8.1 The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network request. 0.8%
• CVE-2023-48262 High 8.1 The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network request. 0.8%
• CVE-2023-48261 Medium 5.3 The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request. 0.6%
• CVE-2023-48260 Medium 5.3 The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request. 0.6%
• CVE-2023-48259 Medium 5.3 The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request. 0.6%
• CVE-2023-48258 Medium 5.5 The vulnerability allows a remote attacker to delete arbitrary files on the file system via a crafted URL or HTTP request through a victim’s session. 0.2%
• CVE-2023-48257 High 7.8 The vulnerability allows a remote attacker to access sensitive data inside exported packages or obtain up to Remote Code Execution (RCE) with root privileges on the device. The vulnerability can be ex 0.5%
• CVE-2023-48256 Medium 5.3 The vulnerability allows a remote attacker to inject arbitrary HTTP response headers or manipulate HTTP response bodies inside a victim’s session via a crafted URL or HTTP request. 0.3%
• CVE-2023-48255 Medium 6.3 The vulnerability allows an unauthenticated remote attacker to send malicious network requests containing arbitrary client-side script code and obtain its execution inside a victim’s session via a cra 0.5%
• CVE-2023-48254 Medium 5.3 The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s session via a crafted URL or HTTP request. 0.3%
• CVE-2023-48253 High 8.8 The vulnerability allows a remote authenticated attacker to read or update arbitrary content of the authentication database via a crafted HTTP request. By abusing this vulnerability it is possible to 0.9%
• CVE-2023-48252 High 8.8 The vulnerability allows an authenticated remote attacker to perform actions exceeding their authorized access via crafted HTTP requests. 0.6%
• CVE-2023-48251 High 8.1 The vulnerability allows a remote attacker to authenticate to the SSH service with root privileges through a hidden hard-coded account. 0.6%
• CVE-2023-48250 High 8.1 The vulnerability allows a remote attacker to authenticate to the web application with high privileges through multiple hidden hard-coded accounts. 0.6%
• CVE-2023-48249 Medium 6.5 The vulnerability allows an authenticated remote attacker to list arbitrary folders in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request. By a 0.8%
• CVE-2023-48248 Medium 5.5 The vulnerability allows an authenticated remote attacker to upload a malicious file to the SD card containing arbitrary client-side script code and obtain its execution inside a victim’s session via 0.4%
• CVE-2023-48247 Medium 5.3 The vulnerability allows an unauthenticated remote attacker to read arbitrary files under the context of the application OS user (“root”) via a crafted HTTP request. 0.6%
• CVE-2023-48246 Medium 6.5 The vulnerability allows a remote attacker to download arbitrary files in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request. 0.8%
• CVE-2023-48245 Medium 6.5 The vulnerability allows an unauthenticated remote attacker to upload arbitrary files under the context of the application OS user (“root”) via a crafted HTTP request. 0.6%
• CVE-2023-48244 Medium 5.3 The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s session via a crafted URL or HTTP request. 0.3%
• CVE-2023-48243 High 8.1 The vulnerability allows a remote attacker to upload arbitrary files in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request. By abusing this vulne 1.1%
• CVE-2023-48242 Medium 6.5 The vulnerability allows an authenticated remote attacker to download arbitrary files in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request. 0.8%