CVE-2022-46080

Nexxt Nebula 1200-AC 15.03.06.60 allows authentication bypass and command execution by using the HTTPD service to enable TELNET

published July 6, 2023

CVSS
โ€”
EPSS
3%
Percentile
84.9
In the wild
Unconfirmed
What it is

โš ๏ธ A casual command execution is on the line! The Nexxt Nebula 1200-AC can be tricked into bypassing authentication, allowing attackers to play around like uninvited guests at a party. ๐ŸŽ‰ Think of it like a restaurant where anyone can simply walk in the back door and take a seat in the kitchen without a reservation โ€” no checks, no questions. This vulnerability lets unauthorized users waltz in and execute commands, as if the chef had left the door unlocked and the cooking instructions out in plain sight. If exploited, this vulnerability could allow an attacker to execute arbitrary commands, potentially leading to unauthorized access or control over the device. This means they could mess with configurations or siphon off sensitive data โ€” definitely not a recipe for security success!

Put simply

Think of it like a restaurant where anyone can simply walk in the back door and take a seat in the kitchen without a reservation โ€” no checks, no questions. This vulnerability lets unauthorized users waltz in and execute commands, as if the chef had left the door unlocked and the cooking instructions out in plain sight. The Nexxt Nebula 1200-AC running version 15.03.06.60 has a flaw in its HTTPD service that can be exploited to bypass authentication and execute commands via TELNET. This backdoor allows attackers to gain control without proper credentials.

What to do

If exploited, this vulnerability could allow an attacker to execute arbitrary commands, potentially leading to unauthorized access or control over the device. This means they could mess with configurations or siphon off sensitive data โ€” definitely not a recipe for security success! To secure your system, disable TELNET unless absolutely necessary. Keep the device firmware updated to the latest version and monitor network traffic for any unauthorized commands. It's wise to audit user access permissions regularly to prevent unauthorized access. You've got this! Follow these steps and you'll keep the kitchen secure and your digital space safe. ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02556 ยท 84.9th percentile
Published
2023-07-06T00:00Z
EPSS history
Timeline
  • 06 JUL 00:00Z
    Nexxt Nebula 1200-AC 15.03.06.60 allows authentication bypass and command execution by using the HTTPD service to enable TELNET
    cvelistv5