Lucene search

K
nvd[email protected]NVD:CVE-2022-46080
HistoryJul 06, 2023 - 2:15 a.m.

CVE-2022-46080

2023-07-0602:15:09
CWE-863
web.nvd.nist.gov
nexxt nebula 1200-ac
authentication bypass
command execution
httpd service
telnet

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

54.5%

Nexxt Nebula 1200-AC 15.03.06.60 allows authentication bypass and command execution by using the HTTPD service to enable TELNET.

Affected configurations

Nvd
Node
nexxtsolutionsnebula1200-acMatch-
AND
nexxtsolutionsnebula1200-ac_firmwareMatch15.03.06.60
VendorProductVersionCPE
nexxtsolutionsnebula1200-ac-cpe:2.3:h:nexxtsolutions:nebula1200-ac:-:*:*:*:*:*:*:*
nexxtsolutionsnebula1200-ac_firmware15.03.06.60cpe:2.3:o:nexxtsolutions:nebula1200-ac_firmware:15.03.06.60:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

54.5%

Related for NVD:CVE-2022-46080