Auth bypass in Bosch Nexo_cordless_nutrunner_nxa011s-36v_\(0608842011\)
CVE-2023-48257
The vulnerability allows a remote attacker to access sensitive data inside exported packages or obtain up to Remote Code Execution (RCE) with root privileges on the device. The vulnerability can be exploited directly by authenticated users…
EPSS: 0.005 (41.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Bosch Nexo_cordless_nutrunner_nxa011s-36v_\(0608842011\)
- Bosch Nexo_cordless_nutrunner_nxa011s-36v-b_\(0608842012\)
- Bosch Nexo_cordless_nutrunner_nxa015s-36v_\(0608842001\)
- Bosch Nexo_cordless_nutrunner_nxa015s-36v-b_\(0608842006\)
- Bosch Nexo_cordless_nutrunner_nxa030s-36v_\(0608842002\)
- Bosch Nexo_cordless_nutrunner_nxa030s-36v-b_\(0608842007\)
- Bosch Nexo_cordless_nutrunner_nxa050s-36v_\(0608842003\)
- Bosch Nexo_cordless_nutrunner_nxa050s-36v-b_\(0608842008\)
- Bosch Nexo_cordless_nutrunner_nxa065s-36v_\(0608842013\)
- Bosch Nexo_cordless_nutrunner_nxa065s-36v-b_\(0608842014\)
Weakness classification (CWE)
References
- psirt@bosch.com (vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2023-48257?
- CVE-2023-48257 is a high-severity vulnerability in Bosch Nexo_cordless_nutrunner_nxa011s-36v_\(0608842011\), classified under CWE-1391. CVSS score: 7.8/10. Published 2024-01-10.
- How severe is CVE-2023-48257?
- High severity. CVSS v3 base score is 7.8 out of 10.