PT-2023-14808 · Nexxt · Nexxt Nebula 1200-Ac

Yerodin · Published 2023-07-06 · Updated 2023-07-12 · CVE-2022-46080

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Nexxt Nebula 1200-AC version 15.03.06.60

Description The issue allows authentication bypass and command execution by utilizing the HTTPD service to enable TELNET.

Recommendations For version 15.03.06.60, consider disabling the HTTPD service or restricting its use to prevent TELNET enablement until a patch is available.

Exploit

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2022-46080

Affected Products

Nexxt Nebula 1200-Ac

References · 7

• 🔥 https://github.com/geniuszlyy/CVE-2022-46080 · Exploit
• 🔥 https://github.com/geniuszly/CVE-2022-46080 · Exploit
• 🔥 https://github.com/yerodin/CVE-2022-46080 · Exploit
• https://osv.dev/vulnerability/CVE-2022-46080 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-46080 · Security Note
• https://t.me/cvenotify/53730 · Telegram Post
• https://nexxtsolutions.com · Note