CVE-2023-48252
HIGHDescription
The vulnerability allows an authenticated remote attacker to perform actions exceeding their authorized access via crafted HTTP requests.
Is your site exposed to CVE-2023-48252?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| bosch | nexo-os |
| bosch | nexo_cordless_nutrunner_nxa011s-36v-b_\(0608842012\) |
| bosch | nexo_cordless_nutrunner_nxa011s-36v_\(0608842011\) |
| bosch | nexo_cordless_nutrunner_nxa015s-36v-b_\(0608842006\) |
| bosch | nexo_cordless_nutrunner_nxa015s-36v_\(0608842001\) |
| bosch | nexo_cordless_nutrunner_nxa030s-36v-b_\(0608842007\) |
| bosch | nexo_cordless_nutrunner_nxa030s-36v_\(0608842002\) |
| bosch | nexo_cordless_nutrunner_nxa050s-36v-b_\(0608842008\) |
| bosch | nexo_cordless_nutrunner_nxa050s-36v_\(0608842003\) |
| bosch | nexo_cordless_nutrunner_nxa065s-36v-b_\(0608842014\) |
| bosch | nexo_cordless_nutrunner_nxa065s-36v_\(0608842013\) |
| bosch | nexo_cordless_nutrunner_nxp012qd-36v-b_\(0608842010\) |
| bosch | nexo_cordless_nutrunner_nxp012qd-36v_\(0608842005\) |
| bosch | nexo_cordless_nutrunner_nxv012t-36v-b_\(0608842016\) |
| bosch | nexo_cordless_nutrunner_nxv012t-36v_\(0608842015\) |
| bosch | nexo_special_cordless_nutrunner_\(0608pe2272\) |
| bosch | nexo_special_cordless_nutrunner_\(0608pe2301\) |
| bosch | nexo_special_cordless_nutrunner_\(0608pe2514\) |
| bosch | nexo_special_cordless_nutrunner_\(0608pe2515\) |
| bosch | nexo_special_cordless_nutrunner_\(0608pe2666\) |
| bosch | nexo_special_cordless_nutrunner_\(0608pe2673\) |
References
Frequently Asked Questions
What is CVE-2023-48252? +
How severe is CVE-2023-48252? +
What products are affected by CVE-2023-48252? +
How do I check if I'm vulnerable to CVE-2023-48252? +
Related Vulnerabilities
NamelessMC is website software for Minecraft servers. In version 2.2.4, `modules/Forum/pages/forum/get_quotes.php` only checks whether the caller is logged in, then …
Insecure Direct Object References (IDOR) in access control in Customer Portal before 2.1.4 on NightWolf Penetration Testing allows an attacker …
Insecure Direct Object References (IDOR) in access control in Tracking 2.1.4 on NightWolf Penetration Testing allows an attacker to access …
fleetdm/fleet is an open source device management, built on osquery. In vulnerable versions of Fleet, an attacker could craft a …
An Unauthenticated Arbitrary File Read vulnerability affects the Agent when installed on a system. The parameter filename does not validate …
XWiki OIDC has various tools to manipulate OpenID Connect protocol in XWiki. Starting in version 2.17.1 and prior to version …