A vulnerability was found in Rexroth Nexo Cordless Nutrunner and Nexo Special Cordless Nutrunner up to V1500-SP2. It has been classified as critical. This affects an unknown code block of the component Network Request Handler. The manipulation with an unknown input leads to a stack-based overflow vulnerability. CWE is classifying the issue as CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network request.

The weakness was shared 01/10/2024. The advisory is shared at psirt.bosch.com. This vulnerability is uniquely identified as CVE-2023-48265 since 11/13/2023. Neither technical details nor an exploit are publicly available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 01/28/2024).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The entries VDB-250268, VDB-250270, VDB-250271 and VDB-250273 are related to this item.

Productinfo

Vendor

• Rexroth

Name

• Nexo Cordless Nutrunner
• Nexo Special Cordless Nutrunner

Version

• V1500-SP2

CPE 2.3info

• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion