CVE-2023-48259 - CVE House
Back to Database
Status published Medium CVE-2023-48259

The vulnerability allows a remote unauthenticated attacker to read arbitrary...

Vulnerability Description

The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-48259

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

Nexo cordless nutrunner NXA015S-36V (0608842001), Nexo cordless nutrunner NXA030S-36V (0608842002), Nexo cordless nutrunner NXA050S-36V (0608842003), Nexo cordless nutrunner NXP012QD-36V (0608842005), Nexo cordless nutrunner NXA015S-36V-B (0608842006), Nexo cordless nutrunner NXA030S-36V-B (0608842007), Nexo cordless nutrunner NXA050S-36V-B (0608842008), Nexo cordless nutrunner NXP012QD-36V-B (0608842010), Nexo cordless nutrunner NXA011S-36V (0608842011), Nexo cordless nutrunner NXA011S-36V-B (0608842012), Nexo cordless nutrunner NXA065S-36V (0608842013), Nexo cordless nutrunner NXA065S-36V-B (0608842014), Nexo cordless nutrunner NXV012T-36V (0608842015), Nexo cordless nutrunner NXV012T-36V-B (0608842016), Nexo special cordless nutrunner (0608PE2272), Nexo special cordless nutrunner (0608PE2301), Nexo special cordless nutrunner (0608PE2514), Nexo special cordless nutrunner (0608PE2515), Nexo special cordless nutrunner (0608PE2666), Nexo special cordless nutrunner (0608PE2673)
Vulnerable Versions:
NEXO-OS V1000-Release

Timeline

Official Publish: January 10th, 2024
Last Modified: June 17th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)