Description (CNA)
The vulnerability allows an authenticated remote attacker to list arbitrary folders in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request. By abusing this vulnerability, it is possible to steal session cookies of other active users.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Rexroth / Nexo cordless nutrunner NXA015S-36V (0608842001) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo cordless nutrunner NXA030S-36V (0608842002) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo cordless nutrunner NXA050S-36V (0608842003) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo cordless nutrunner NXP012QD-36V (0608842005) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo cordless nutrunner NXA015S-36V-B (0608842006) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo cordless nutrunner NXA030S-36V-B (0608842007) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo cordless nutrunner NXA050S-36V-B (0608842008) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo cordless nutrunner NXP012QD-36V-B (0608842010) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo cordless nutrunner NXA011S-36V (0608842011) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo cordless nutrunner NXA011S-36V-B (0608842012) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo cordless nutrunner NXA065S-36V (0608842013) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo cordless nutrunner NXA065S-36V-B (0608842014) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo cordless nutrunner NXV012T-36V (0608842015) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo cordless nutrunner NXV012T-36V-B (0608842016) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo special cordless nutrunner (0608PE2272) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo special cordless nutrunner (0608PE2301) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo special cordless nutrunner (0608PE2514) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo special cordless nutrunner (0608PE2515) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo special cordless nutrunner (0608PE2666) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo special cordless nutrunner (0608PE2673) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
CWE
CWE-22
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.