NC
Product
Nexo cordless nutrunner NXA015S-36V-B (0608842006)
25
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 9Medium 8Low 0
Watch
Add Nexo cordless nutrunner NXA015S-36V-B (0608842006) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-48249 | 6.5 | Jan 10 | The vulnerability allows an authenticated remote attacker to list arbitrary folders in all paths of the system under the context of the application OS user (“root”) via a crafted… Affected: NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| CVE-2023-48246 | 6.5 | Jan 10 | The vulnerability allows a remote attacker to download arbitrary files in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request Affected: NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| CVE-2023-48242 | 6.5 | Jan 10 | The vulnerability allows an authenticated remote attacker to download arbitrary files in all paths of the system under the context of the application OS user (“root”) via a… Affected: NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| CVE-2023-48256 | 6.3 | Jan 10 | The vulnerability allows a remote attacker to inject arbitrary HTTP response headers or manipulate HTTP response bodies inside a victim’s session via a crafted URL or HTTP request Affected: NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| CVE-2023-48255 | 6.1 | Jan 10 | The vulnerability allows an unauthenticated remote attacker to send malicious network requests containing arbitrary client-side script code and obtain its execution inside a… Affected: NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| CVE-2023-48254 | 6.1 | Jan 10 | The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s session via a crafted URL or HTTP request Affected: NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| CVE-2023-48244 | 6.1 | Jan 10 | The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s session via a crafted URL or HTTP request Affected: NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| CVE-2023-48248 | 5.4 | Jan 10 | The vulnerability allows an authenticated remote attacker to upload a malicious file to the SD card containing arbitrary client-side script code and obtain its execution inside a… Affected: NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
Showing 8