CVE-2023-48247: High severity bosch nexo-os vulnerability
Published Jan 10, 2024
·Updated
The vulnerability allows an unauthenticated remote attacker to read arbitrary files under the context of the application OS user (“root”) via a crafted HTTP request.
Affected Software
21 affected components
All of the following
Bosch Nexo-os>=1000<=1500-sp2
Any of the following
Bosch Nexo Cordless Nutrunner Nxa011s-36v-b \(0608842012\)
Bosch Nexo Cordless Nutrunner Nxa011s-36v \(0608842011\)
Bosch Nexo Cordless Nutrunner Nxa015s-36v-b \(0608842006\)
Bosch Nexo Cordless Nutrunner Nxa015s-36v \(0608842001\)
Bosch Nexo Cordless Nutrunner Nxa030s-36v-b \(0608842007\)
Bosch Nexo Cordless Nutrunner Nxa030s-36v \(0608842002\)
Bosch Nexo Cordless Nutrunner Nxa050s-36v-b \(0608842008\)
Bosch Nexo Cordless Nutrunner Nxa050s-36v \(0608842003\)
Bosch Nexo Cordless Nutrunner Nxa065s-36v-b \(0608842014\)
Bosch Nexo Cordless Nutrunner Nxa065s-36v \(0608842013\)
Bosch Nexo Cordless Nutrunner Nxp012qd-36v-b \(0608842010\)
Bosch Nexo Cordless Nutrunner Nxp012qd-36v \(0608842005\)
Bosch Nexo Cordless Nutrunner Nxv012t-36v-b \(0608842016\)
Bosch Nexo Cordless Nutrunner Nxv012t-36v \(0608842015\)
Bosch Nexo Special Cordless Nutrunner \(0608pe2272\)
Bosch Nexo Special Cordless Nutrunner \(0608pe2301\)
Bosch Nexo Special Cordless Nutrunner \(0608pe2514\)
Bosch Nexo Special Cordless Nutrunner \(0608pe2515\)
Bosch Nexo Special Cordless Nutrunner \(0608pe2666\)
Bosch Nexo Special Cordless Nutrunner \(0608pe2673\)
Event History
Jan 10, 2024
CVE Published
via MITRE·10:40 AM
Data Sourced
via MITRE·10:40 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2023-48247?
CVE-2023-48247 is rated as high severity due to its potential for unauthorized access to critical files.
2
How does CVE-2023-48247 exploit the vulnerability?
CVE-2023-48247 exploits the vulnerability through crafted HTTP requests that allow reading of arbitrary files.
3
What affected software does CVE-2023-48247 concern?
CVE-2023-48247 concerns Bosch Nexo-OS versions from 1000 to 1500-sp2.
4
Can CVE-2023-48247 affect devices other than the specified Nexo-OS?
CVE-2023-48247 specifically affects Bosch Nexo-OS and does not impact the listed Cordless Nutrunner models.
5
How can I mitigate the risk of CVE-2023-48247?
To mitigate CVE-2023-48247, users should apply the latest patches provided by Bosch for affected Nexo-OS versions.