Login Request a demo
NE
Product
Nexo-os
by Bosch · last CVE Jan 10, 2024
25
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities25In the news0Timeline
Severity mix
Critical 8High 9Medium 8Low 0
Severity
All severities25Critical8High9Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Nexo-os to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-48257
8.8
1%
Jan 10
The vulnerability allows a remote attacker to access sensitive data inside exported packages or obtain up to Remote Code Execution (RCE) with root privileges on the device
Affected: 1000 through 1500-sp2
CVE-2023-48253
8.8
1%
Jan 10
The vulnerability allows a remote authenticated attacker to read or update arbitrary content of the authentication database via a crafted HTTP request
Affected: 1000 through 1500-sp2
CVE-2023-48252
8.8
1%
Jan 10
The vulnerability allows an authenticated remote attacker to perform actions exceeding their authorized access via crafted HTTP requests
Affected: 1000 through 1500-sp2
CVE-2023-48243
8.8
1%
Jan 10
The vulnerability allows a remote attacker to upload arbitrary files in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request
Affected: 1000 through 1500-sp2
CVE-2023-48258
8.1
0%
Jan 10
The vulnerability allows a remote attacker to delete arbitrary files on the file system via a crafted URL or HTTP request through a victim’s session
Affected: 1000 through 1500-sp2
CVE-2023-48261
7.5
1%
Jan 10
The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request
Affected: 1000 through 1500-sp2
CVE-2023-48260
7.5
1%
Jan 10
The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request
Affected: 1000 through 1500-sp2
CVE-2023-48259
7.5
1%
Jan 10
The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request
Affected: 1000 through 1500-sp2
CVE-2023-48247
7.5
1%
Jan 10
The vulnerability allows an unauthenticated remote attacker to read arbitrary files under the context of the application OS user (“root”) via a crafted HTTP request
Affected: 1000 through 1500-sp2
Showing 9