Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
bosch nexo-os vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2023-48242
The vulnerability allows an authenticated remote malicious user to download arbitrary files in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request.
Bosch Nexo-os
NA
CVE-2023-48243
The vulnerability allows a remote malicious user to upload arbitrary files in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request. By abusing this vulnerability, it is possible to obtain remote code execution (RCE) ...
Bosch Nexo-os
NA
CVE-2023-48244
The vulnerability allows a remote malicious user to inject and execute arbitrary client-side script code inside a victim’s session via a crafted URL or HTTP request.
Bosch Nexo-os
NA
CVE-2023-48245
The vulnerability allows an unauthenticated remote malicious user to upload arbitrary files under the context of the application OS user (“root”) via a crafted HTTP request.
Bosch Nexo-os
NA
CVE-2023-48246
The vulnerability allows a remote malicious user to download arbitrary files in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request.
Bosch Nexo-os
NA
CVE-2023-48247
The vulnerability allows an unauthenticated remote malicious user to read arbitrary files under the context of the application OS user (“root”) via a crafted HTTP request.
Bosch Nexo-os
NA
CVE-2023-48248
The vulnerability allows an authenticated remote malicious user to upload a malicious file to the SD card containing arbitrary client-side script code and obtain its execution inside a victim’s session via a crafted URL, HTTP request, or simply by waiting for the victim to ...
Bosch Nexo-os
NA
CVE-2023-48249
The vulnerability allows an authenticated remote malicious user to list arbitrary folders in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request. By abusing this vulnerability, it is possible to steal session cookie...
Bosch Nexo-os
NA
CVE-2023-48250
The vulnerability allows a remote malicious user to authenticate to the web application with high privileges through multiple hidden hard-coded accounts.
Bosch Nexo-os
NA
CVE-2023-48251
The vulnerability allows a remote malicious user to authenticate to the SSH service with root privileges through a hidden hard-coded account.
Bosch Nexo-os
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
inject
CVE-2024-34001
CVE-2024-37018
LFI
CVE-2024-1275
CVE-2024-1086
CSRF
CVE-2024-31030
CVE-2024-24919
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
NEXT »