NEXO-OS Arbitrary File Read

The vulnerability of the NEXO-OS operating system for tools used in production line assembly work, such as the Bosch Nexo cordless nutrunner and the Bosch Nexo special cordless nutrunner, is related to an incorrect limitation on the path name to the restricted access catalog. Exploiting this...

NEXO-OS Database Access

The vulnerability of the NEXO-OS operating system for tools used in production line assembly work, such as the Bosch Nexo cordless nutrunner and the Bosch Nexo special cordless nutrunner, is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability ca...

NEXO-OS Database Access

The vulnerability of the NEXO-OS operating system for tools used in production line assembly work, such as the Bosch Nexo cordless nutrunner and the Bosch Nexo special cordless nutrunner, is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability ca...

NEXO-OS Code Execution

The vulnerability of the NEXO-OS operating system for tools used in production line maintenance, such as the Bosch Nexo cordless nutrunner and the Bosch Nexo special cordless nutrunner, exists due to the lack of protective measures for the website structure. Exploiting this vulnerability can allo...

NEXO-OS File Load

The vulnerability of the NEXO-OS operating system for tools used in production line assembly work, such as the Bosch Nexo cordless nutrunner and the Bosch Nexo special cordless nutrunner, is related to an incorrect limitation on the path name to the restricted access catalog. Exploiting this...

NEXO-OS Code Execution

The vulnerability of the NEXO-OS operating system for tools used in production line maintenance with the Bosch Nexo cordless nutrunner and Bosch Nexo special cordless nutrunner is related to buffer overflow in the stack. Exploiting this vulnerability could allow a malicious actor to trigger...

NEXO-OS RCE

The vulnerability of the NEXO-OS operating system for tools used in production line assembly work, such as the Bosch Nexo cordless nutrunner and the Bosch Nexo special cordless nutrunner, is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious...

NEXO-OS File Deletion

The vulnerability of the NEXO-OS operating system for tools used in production line assembly work, such as the Bosch Nexo cordless nutrunner and the Bosch Nexo special cordless nutrunner, is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a remote attacker...

NEXO-OS File Read

The vulnerability of the NEXO-OS operating system for tools used in production line assembly work, such as the Bosch Nexo cordless nutrunner and the Bosch Nexo special cordless nutrunner, is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious...

PT-2024-1176 · Nexo-Os · Nexo-Os

Name of the Vulnerable Software and Affected Versions: NEXO-OS affected versions not specified Description: The issue allows a remote attacker to upload arbitrary files in all paths of the system under the context of the application OS user “root” via a crafted HTTP request. By abusing this issue...

PT-2024-1179

Name of the Vulnerable Software and Affected Versions Bosch Nexo cordless nutrunner and Bosch Nexo special cordless nutrunner affected versions not specified Description The issue allows an unauthenticated remote attacker to read arbitrary files under the context of the application OS user “root”...

PT-2024-1180

Name of the Vulnerable Software and Affected Versions NEXO-OS affected versions not specified Description The issue is related to weaknesses in the authorization procedure of the NEXO-OS operating system, which can be exploited by an authenticated remote attacker to perform actions that exceed...

PT-2024-1490

Name of the Vulnerable Software and Affected Versions Bosch Nexo cordless nutrunner and Bosch Nexo special cordless nutrunner affected versions not specified NEXO-OS affected versions not specified Description The issue allows a remote attacker to inject and execute arbitrary client-side script...

PT-2024-1178 · Nexo-Os · Nexo-Os

Name of the Vulnerable Software and Affected Versions: NEXO-OS affected versions not specified Description: The issue allows a remote attacker to download arbitrary files in all paths of the system under the context of the application OS user “root” via a crafted HTTP request. This is due to...

PT-2024-1185 · Bosch · Bosch Nexo Cordless Nutrunner +2

Name of the Vulnerable Software and Affected Versions: Bosch Nexo cordless nutrunner and Bosch Nexo special cordless nutrunner affected versions not specified Description: The issue is related to a buffer overflow in the stack of the NEXO-OS operating system. It allows an unauthenticated remote...

PT-2024-1175

Name of the Vulnerable Software and Affected Versions NEXO-OS affected versions not specified Description The issue allows an authenticated remote attacker to download arbitrary files in all paths of the system under the context of the application OS user “root” via a crafted HTTP request. This i...

PT-2024-1177 · Bosch · Nexo-Os

Name of the Vulnerable Software and Affected Versions: NEXO-OS affected versions not specified Description: The issue allows an unauthenticated remote attacker to upload arbitrary files under the context of the application OS user “root” via a crafted HTTP request. This is related to weaknesses i...