The vulnerability allows an authenticated remote attacker to list arbitrary folders in all paths of the system under the context of the appl
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: yes
- Technical impact: partial
Summary
The vulnerability allows an authenticated remote attacker to list arbitrary folders in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request. By abusing this vulnerability, it is possible to steal session cookies of other active users.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: yes · Technical impact: partial
- Record last updated
Affected versions
- Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo cordless nutrunner NXA030S-36V (0608842002)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo cordless nutrunner NXA050S-36V (0608842003)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo cordless nutrunner NXP012QD-36V (0608842005)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo cordless nutrunner NXA015S-36V-B (0608842006)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo cordless nutrunner NXA030S-36V-B (0608842007)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo cordless nutrunner NXA050S-36V-B (0608842008)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo cordless nutrunner NXP012QD-36V-B (0608842010)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo cordless nutrunner NXA011S-36V (0608842011)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo cordless nutrunner NXA011S-36V-B (0608842012)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo cordless nutrunner NXA065S-36V (0608842013)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo cordless nutrunner NXA065S-36V-B (0608842014)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo cordless nutrunner NXV012T-36V (0608842015)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo cordless nutrunner NXV012T-36V-B (0608842016)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo special cordless nutrunner (0608PE2272)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo special cordless nutrunner (0608PE2301)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo special cordless nutrunner (0608PE2514)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo special cordless nutrunner (0608PE2515)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo special cordless nutrunner (0608PE2666)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo special cordless nutrunner (0608PE2673)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2