Description (CNA)
The vulnerability allows a remote authenticated attacker to read or update arbitrary content of the authentication database via a crafted HTTP request. By abusing this vulnerability it is possible to exfiltrate other users’ password hashes or update them with arbitrary values and access their accounts.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Rexroth / Nexo cordless nutrunner NXA015S-36V (0608842001) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo cordless nutrunner NXA030S-36V (0608842002) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo cordless nutrunner NXA050S-36V (0608842003) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo cordless nutrunner NXP012QD-36V (0608842005) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo cordless nutrunner NXA015S-36V-B (0608842006) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo cordless nutrunner NXA030S-36V-B (0608842007) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo cordless nutrunner NXA050S-36V-B (0608842008) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo cordless nutrunner NXP012QD-36V-B (0608842010) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo cordless nutrunner NXA011S-36V (0608842011) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo cordless nutrunner NXA011S-36V-B (0608842012) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo cordless nutrunner NXA065S-36V (0608842013) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo cordless nutrunner NXA065S-36V-B (0608842014) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo cordless nutrunner NXV012T-36V (0608842015) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo cordless nutrunner NXV012T-36V-B (0608842016) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo special cordless nutrunner (0608PE2272) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo special cordless nutrunner (0608PE2301) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo special cordless nutrunner (0608PE2514) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo special cordless nutrunner (0608PE2515) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo special cordless nutrunner (0608PE2666) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
| Rexroth / Nexo special cordless nutrunner (0608PE2673) | affected NEXO-OS V1000-Release through NEXO-OS V1500-SP2 |
CWE
CWE-89
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.