Advisories · Technology

Rexroth Nexo cordless nutrunner NXP012QD-36V (0608842005).

Every CVE that names Rexroth Nexo cordless nutrunner NXP012QD-36V (0608842005) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-48266 CVE record

CVSS 8.1 High

Stack-based buffer overflow in Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) and others
- Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
- Rexroth Nexo cordless nutrunner NXA030S-36V (0608842002)
- Memory corruption
Not analysed yet 10 Jan 2024
CVE-2023-48265 CVE record

CVSS 8.1 High

Stack-based buffer overflow in Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) and others
- Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
- Rexroth Nexo cordless nutrunner NXA030S-36V (0608842002)
- Memory corruption
Not analysed yet 10 Jan 2024
CVE-2023-48264 CVE record

CVSS 8.1 High

Stack-based buffer overflow in Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) and others
- Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
- Rexroth Nexo cordless nutrunner NXA030S-36V (0608842002)
- Memory corruption
Not analysed yet 10 Jan 2024
CVE-2023-48263 CVE record

CVSS 8.1 High

Heap-based buffer overflow in Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) and others
- Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
- Rexroth Nexo cordless nutrunner NXA030S-36V (0608842002)
- Memory corruption
Not analysed yet 10 Jan 2024
CVE-2023-48262 CVE record

CVSS 8.1 High

Stack-based buffer overflow in Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) and others
- Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
- Rexroth Nexo cordless nutrunner NXA030S-36V (0608842002)
- Memory corruption
Not analysed yet 10 Jan 2024
CVE-2023-48261 CVE record

CVSS 5.3 Medium

SQL injection in Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) and others
- Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
- Rexroth Nexo cordless nutrunner NXA030S-36V (0608842002)
- SQL injection
Not analysed yet 10 Jan 2024
CVE-2023-48260 CVE record

CVSS 5.3 Medium

SQL injection in Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) and others
- Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
- Rexroth Nexo cordless nutrunner NXA030S-36V (0608842002)
- SQL injection
Not analysed yet 10 Jan 2024
CVE-2023-48259 CVE record

CVSS 5.3 Medium

SQL injection in Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) and others
- Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
- Rexroth Nexo cordless nutrunner NXA030S-36V (0608842002)
- SQL injection
Not analysed yet 10 Jan 2024
CVE-2023-48258 CVE record

CVSS 5.5 Medium

Cross-site request forgery in Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) and others
- Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
- Rexroth Nexo cordless nutrunner NXA030S-36V (0608842002)
- Cross-site request forgery (CSRF)
Not analysed yet 10 Jan 2024
CVE-2023-48257 CVE record

CVSS 7.8 High

Weak credentials in Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) and others
- Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
- Rexroth Nexo cordless nutrunner NXA030S-36V (0608842002)
- Hard-coded credentials
Not analysed yet 10 Jan 2024
CVE-2023-48256 CVE record

CVSS 5.3 Medium

HTTP response splitting in Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) and others
- Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
- Rexroth Nexo cordless nutrunner NXA030S-36V (0608842002)
- Other injection
Not analysed yet 10 Jan 2024
CVE-2023-48255 CVE record

CVSS 6.3 Medium

Cross-site scripting in Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) and others
- Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
- Rexroth Nexo cordless nutrunner NXA030S-36V (0608842002)
- Cross-site scripting (XSS)
Not analysed yet 10 Jan 2024
CVE-2023-48254 CVE record

CVSS 5.3 Medium

Cross-site scripting in Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) and others
- Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
- Rexroth Nexo cordless nutrunner NXA030S-36V (0608842002)
- Cross-site scripting (XSS)
Not analysed yet 10 Jan 2024
CVE-2023-48253 CVE record

CVSS 8.8 High

SQL injection in Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) and others
- Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
- Rexroth Nexo cordless nutrunner NXA030S-36V (0608842002)
- SQL injection
Not analysed yet 10 Jan 2024
CVE-2023-48252 CVE record

CVSS 8.8 High

Improper authorization in Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) and others
- Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
- Rexroth Nexo cordless nutrunner NXA030S-36V (0608842002)
- Broken access control
Not analysed yet 10 Jan 2024
CVE-2023-48251 CVE record

CVSS 8.1 High

Hard-coded credentials in Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) and others
- Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
- Rexroth Nexo cordless nutrunner NXA030S-36V (0608842002)
- Hard-coded credentials
Not analysed yet 10 Jan 2024
CVE-2023-48250 CVE record

CVSS 8.1 High

Hard-coded credentials in Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) and others
- Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
- Rexroth Nexo cordless nutrunner NXA030S-36V (0608842002)
- Hard-coded credentials
Not analysed yet 10 Jan 2024
CVE-2023-48249 CVE record

CVSS 6.5 Medium

Path traversal in Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) and others
- Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
- Rexroth Nexo cordless nutrunner NXA030S-36V (0608842002)
- Path traversal
Not analysed yet 10 Jan 2024
CVE-2023-48248 CVE record

CVSS 5.5 Medium

Cross-site scripting in Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) and others
- Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
- Rexroth Nexo cordless nutrunner NXA030S-36V (0608842002)
- Cross-site scripting (XSS)
Not analysed yet 10 Jan 2024
CVE-2023-48247 CVE record

CVSS 5.3 Medium

Missing authorization in Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) and others
- Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
- Rexroth Nexo cordless nutrunner NXA030S-36V (0608842002)
- Broken access control
Not analysed yet 10 Jan 2024
CVE-2023-48246 CVE record

CVSS 6.5 Medium

Path traversal in Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) and others
- Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
- Rexroth Nexo cordless nutrunner NXA030S-36V (0608842002)
- Path traversal
Not analysed yet 10 Jan 2024
CVE-2023-48245 CVE record

CVSS 6.5 Medium

Missing authorization in Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) and others
- Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
- Rexroth Nexo cordless nutrunner NXA030S-36V (0608842002)
- Broken access control
Not analysed yet 10 Jan 2024
CVE-2023-48244 CVE record

CVSS 5.3 Medium

Cross-site scripting in Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) and others
- Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
- Rexroth Nexo cordless nutrunner NXA030S-36V (0608842002)
- Cross-site scripting (XSS)
Not analysed yet 10 Jan 2024
CVE-2023-48243 CVE record

CVSS 8.1 High

Path traversal in Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) and others
- Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
- Rexroth Nexo cordless nutrunner NXA030S-36V (0608842002)
- Path traversal
Not analysed yet 10 Jan 2024
CVE-2023-48242 CVE record

CVSS 6.5 Medium

Path traversal in Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) and others
- Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
- Rexroth Nexo cordless nutrunner NXA030S-36V (0608842002)
- Path traversal
Not analysed yet 10 Jan 2024