Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2022-44149
HistoryJan 06, 2023 - 5:15 p.m.

CVE-2022-44149

2023-01-0617:15:09
CWE-78
mitre
web.nvd.nist.gov
35
cve-2022-44149
nexxt amp300
os command execution
json
authentication
nvd

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.038

Percentile

92.1%

JSON

The web service on Nexxt Amp300 ARN02304U8 42.103.1.5095 and 80.103.2.5045 devices allows remote OS command execution by placing &telnetd in the JSON host field to the ping feature of the goform/sysTools component. Authentication is required

Affected configurations

Nvd
Node
nexxtsolutionsamp300_firmwareMatch42.103.1.5095
OR
nexxtsolutionsamp300_firmwareMatch80.103.2.5045
AND
nexxtsolutionsamp300Match-
VendorProductVersionCPE
nexxtsolutionsamp300_firmware42.103.1.5095cpe:2.3:o:nexxtsolutions:amp300_firmware:42.103.1.5095:*:*:*:*:*:*:*
nexxtsolutionsamp300_firmware80.103.2.5045cpe:2.3:o:nexxtsolutions:amp300_firmware:80.103.2.5045:*:*:*:*:*:*:*
nexxtsolutionsamp300-cpe:2.3:h:nexxtsolutions:amp300:-:*:*:*:*:*:*:*

Related

prion 1
zdt 2
exploitdb 1
packetstorm 1
cvelist 1
nvd 1
prion
prion
Authentication flaw
2023-01-06 17:15:00
zdt
zdt
Nexxt Router Firmware 42.103.1.5095 Remote Code Execution Exploit
2023-01-04 00:00:00
Nexxt Router Firmware 42.103.1.5095 - Remote Code Execution (Authenticated) Exploit
2023-04-02 00:00:00
exploitdb
exploitdb
Nexxt Router Firmware 42.103.1.5095 - Remote Code Execution (RCE) (Authenticated)
2023-04-01 00:00:00
packetstorm
packetstorm
Nexxt Router Firmware 42.103.1.5095 Remote Code Execution
2023-01-04 00:00:00
cvelist
cvelist
CVE-2022-44149
2023-01-06 00:00:00
nvd
nvd
CVE-2022-44149
2023-01-06 17:15:09

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.038

Percentile

92.1%

JSON
Related for CVE-2022-44149
prion1zdt2exploitdb1packetstorm1cvelist1nvd1