Remote code execution

2024-01-1011:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

remote attacker

arbitrary files

system paths

application os user

root privileges

device

nvd

8.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

31.5%

JSON

The vulnerability allows a remote attacker to upload arbitrary files in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request.
By abusing this vulnerability, it is possible to obtain remote code execution (RCE) with root privileges on the device.

CPENameOperatorVersion
nexo-osge1000
nexo-osle1500

CPE	Name	Operator	Version
	nexo-os	ge	1000
	nexo-os	le	1500

References

psirt.bosch.com/security-advisories/BOSCH-SA-711465.html