PT-2023-14431 · Nexxt · Nexxt Amp300

Yerodin Richards

·

Publicado

2023-01-04

·

Atualizado

2025-09-16

·

CVE-2022-44149

CVSS v3.1

8.8

Alta

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Nexxt Amp300 ARN02304U8 version 42.103.1.5095 Nexxt Amp300 ARN02304U8 version 80.103.2.5045
Description The web service on Nexxt Amp300 ARN02304U8 devices allows remote OS command execution by placing &telnetd in the JSON host field to the "ping" feature of the "goform/sysTools" component. Authentication is required.
Recommendations For version 42.103.1.5095, consider disabling the "goform/sysTools" component until a patch is available. For version 80.103.2.5045, restrict access to the "ping" feature of the "goform/sysTools" component to minimize the risk of exploitation. Avoid using the host field in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2022-44149

Produtos afetados

Nexxt Amp300