The vulnerability allows an authenticated remote malicious user to upload a malicious file to the SD card containing arbitrary client-side script code and obtain its execution inside a victim’s session via a crafted URL, HTTP request, or simply by waiting for the victim to view the poisoned file.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
bosch nexo-os |
Vulmon