CVE-2023-48257 - CVE House
Back to Database
Status published High CVE-2023-48257

The vulnerability allows a remote attacker to access sensitive data...

Vulnerability Description

The vulnerability allows a remote attacker to access sensitive data inside exported packages or obtain up to Remote Code Execution (RCE) with root privileges on the device. The vulnerability can be exploited directly by authenticated users, via crafted HTTP requests, or indirectly by unauthenticated users, by accessing already-exported backup packages, or crafting an import package and inducing an authenticated victim into sending the HTTP upload request.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-48257

Credits & Attribution

No credits recorded in the NVD database.

References

More from Rexroth

View All →
CVE-2023-48266
The vulnerability allows an unauthenticated remote attacker to perform a...
High 8.1
CVE-2023-48265
The vulnerability allows an unauthenticated remote attacker to perform a...
High 8.1
CVE-2023-48264
The vulnerability allows an unauthenticated remote attacker to perform a...
High 8.1
CVE-2023-48263
The vulnerability allows an unauthenticated remote attacker to perform a...
High 8.1
CVE-2023-48262
The vulnerability allows an unauthenticated remote attacker to perform a...
High 8.1

Affected Vendor

Affected Software

Nexo cordless nutrunner NXA015S-36V (0608842001), Nexo cordless nutrunner NXA030S-36V (0608842002), Nexo cordless nutrunner NXA050S-36V (0608842003), Nexo cordless nutrunner NXP012QD-36V (0608842005), Nexo cordless nutrunner NXA015S-36V-B (0608842006), Nexo cordless nutrunner NXA030S-36V-B (0608842007), Nexo cordless nutrunner NXA050S-36V-B (0608842008), Nexo cordless nutrunner NXP012QD-36V-B (0608842010), Nexo cordless nutrunner NXA011S-36V (0608842011), Nexo cordless nutrunner NXA011S-36V-B (0608842012), Nexo cordless nutrunner NXA065S-36V (0608842013), Nexo cordless nutrunner NXA065S-36V-B (0608842014), Nexo cordless nutrunner NXV012T-36V (0608842015), Nexo cordless nutrunner NXV012T-36V-B (0608842016), Nexo special cordless nutrunner (0608PE2272), Nexo special cordless nutrunner (0608PE2301), Nexo special cordless nutrunner (0608PE2514), Nexo special cordless nutrunner (0608PE2515), Nexo special cordless nutrunner (0608PE2666), Nexo special cordless nutrunner (0608PE2673)
Vulnerable Versions:
NEXO-OS V1000-Release

Timeline

Official Publish: January 10th, 2024
Last Modified: June 17th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-1391

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.