CVE-2023-48251: Critical severity bosch nexo-os vulnerability
Published Jan 10, 2024
·Updated
The vulnerability allows a remote attacker to authenticate to the SSH service with root privileges through a hidden hard-coded account.
Affected Software
21 affected components
All of the following
Bosch Nexo-os>=1000<=1500-sp2
Any of the following
Bosch Nexo Cordless Nutrunner Nxa011s-36v-b \(0608842012\)
Bosch Nexo Cordless Nutrunner Nxa011s-36v \(0608842011\)
Bosch Nexo Cordless Nutrunner Nxa015s-36v-b \(0608842006\)
Bosch Nexo Cordless Nutrunner Nxa015s-36v \(0608842001\)
Bosch Nexo Cordless Nutrunner Nxa030s-36v-b \(0608842007\)
Bosch Nexo Cordless Nutrunner Nxa030s-36v \(0608842002\)
Bosch Nexo Cordless Nutrunner Nxa050s-36v-b \(0608842008\)
Bosch Nexo Cordless Nutrunner Nxa050s-36v \(0608842003\)
Bosch Nexo Cordless Nutrunner Nxa065s-36v-b \(0608842014\)
Bosch Nexo Cordless Nutrunner Nxa065s-36v \(0608842013\)
Bosch Nexo Cordless Nutrunner Nxp012qd-36v-b \(0608842010\)
Bosch Nexo Cordless Nutrunner Nxp012qd-36v \(0608842005\)
Bosch Nexo Cordless Nutrunner Nxv012t-36v-b \(0608842016\)
Bosch Nexo Cordless Nutrunner Nxv012t-36v \(0608842015\)
Bosch Nexo Special Cordless Nutrunner \(0608pe2272\)
Bosch Nexo Special Cordless Nutrunner \(0608pe2301\)
Bosch Nexo Special Cordless Nutrunner \(0608pe2514\)
Bosch Nexo Special Cordless Nutrunner \(0608pe2515\)
Bosch Nexo Special Cordless Nutrunner \(0608pe2666\)
Bosch Nexo Special Cordless Nutrunner \(0608pe2673\)
Event History
Jan 10, 2024
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2023-48251?
The severity of CVE-2023-48251 is critical because it allows remote attackers to gain root access to the SSH service.
2
How do I fix CVE-2023-48251?
To fix CVE-2023-48251, update affected Bosch Nexo OS devices to the latest firmware that addresses this vulnerability.
3
What are the affected devices for CVE-2023-48251?
CVE-2023-48251 affects various Bosch Nexo OS devices within the version range from 1000 to 1500-sp2.
4
Can CVE-2023-48251 be exploited remotely?
Yes, CVE-2023-48251 can be exploited remotely since it allows unauthorized SSH access to vulnerable devices.
5
Is CVE-2023-48251 related to hard-coded credentials?
Yes, CVE-2023-48251 involves a hidden hard-coded account that enables attackers to bypass authentication.