CVE-2023-48242

MEDIUM

Bosch nexo-os 1000-1500-sp2 - Authenticated Path Traversal

Title source: llm
STIX 2.1

Description

The vulnerability allows an authenticated remote attacker to download arbitrary files in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request.

References (1)

Core 1
Core References

Scores

CVSS v3 6.5
EPSS 0.0078
EPSS Percentile 51.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-22
Status published
Products (1)
bosch/nexo-os 1000 - 1500-sp2
Published Jan 10, 2024
Tracked Since Feb 18, 2026