PT-2023-14808 · Nexxt · Nexxt Nebula 1200-Ac

Yerodin · Publicado 2023-07-06 · Atualizado 2023-07-12 · CVE-2022-46080

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Nexxt Nebula 1200-AC version 15.03.06.60

Description The issue allows authentication bypass and command execution by utilizing the HTTPD service to enable TELNET.

Recommendations For version 15.03.06.60, consider disabling the HTTPD service or restricting its use to prevent TELNET enablement until a patch is available.

Exploit

Correção

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

CVE-2022-46080

Produtos afetados

Nexxt Nebula 1200-Ac

Referências · 7

• 🔥 https://github.com/geniuszlyy/CVE-2022-46080 · Exploit
• 🔥 https://github.com/geniuszly/CVE-2022-46080 · Exploit
• 🔥 https://github.com/yerodin/CVE-2022-46080 · Exploit
• https://t.me/cvenotify/53730 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2022-46080 · Aviso do Fabricante
• https://nexxtsolutions.com · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2022-46080 · Nota de Segurança