The vulnerability allows a remote attacker to access sensitive data inside exported packages or obtain up to Remote Code Execution (RCE) wit
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: yes
- Technical impact: partial
Summary
The vulnerability allows a remote attacker to access sensitive data inside exported packages or obtain up to Remote Code Execution (RCE) with root privileges on the device. The vulnerability can be exploited directly by authenticated users, via crafted HTTP requests, or indirectly by unauthenticated users, by accessing already-exported backup packages, or crafting an import package and inducing an authenticated victim into sending the HTTP upload request.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: yes · Technical impact: partial
- Record last updated
Affected versions
- Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo cordless nutrunner NXA030S-36V (0608842002)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo cordless nutrunner NXA050S-36V (0608842003)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo cordless nutrunner NXP012QD-36V (0608842005)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo cordless nutrunner NXA015S-36V-B (0608842006)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo cordless nutrunner NXA030S-36V-B (0608842007)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo cordless nutrunner NXA050S-36V-B (0608842008)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo cordless nutrunner NXP012QD-36V-B (0608842010)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo cordless nutrunner NXA011S-36V (0608842011)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo cordless nutrunner NXA011S-36V-B (0608842012)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo cordless nutrunner NXA065S-36V (0608842013)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo cordless nutrunner NXA065S-36V-B (0608842014)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo cordless nutrunner NXV012T-36V (0608842015)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo cordless nutrunner NXV012T-36V-B (0608842016)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo special cordless nutrunner (0608PE2272)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo special cordless nutrunner (0608PE2301)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo special cordless nutrunner (0608PE2514)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo special cordless nutrunner (0608PE2515)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo special cordless nutrunner (0608PE2666)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2
- Rexroth Nexo special cordless nutrunner (0608PE2673)
From NEXO-OS V1000-Release · through NEXO-OS V1500-SP2