CVE-2022-44149

The web service on Nexxt Amp300 ARN02304U8 42.103.1.5095 devices allows remote OS command...

8.8 HighPublic exploit

The web service on Nexxt Amp300 ARN02304U8 42.103.1.5095 and 80.103.2.5045 devices allows remote OS command execution by placing &telnetd in the JSON host field to the ping feature of the goform/sysTools component. Authentication is required

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

64.4%Up 62.1 points since Jan 7, 2023

What each source reports

NVD Score used 8.8

Record: CVE-2022-44149
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-78
Updated: 2026-11-02

CVE List 8.8

Record: CVE-2022-44149
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-78
Updated: 2026-11-02

EUVDEUVD-2022-47099 8.8

Record: EUVD-2022-47099
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-8m32-3cxw-hm8c 8.8

The web service on Nexxt Amp300 ARN02304U8 42.103.1.5095 devices allows remote OS command...

The web service on Nexxt Amp300 ARN02304U8 42.103.1.5095 devices allows remote OS command execution by placing &telnetd in the JSON host field to the ping feature of the goform/sysTools component. Authentication is required.

Record: GHSA-8m32-3cxw-hm8c
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-78
Updated: 2026-11-02

Affected products

nexxtsolutions amp300 firmware

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Nexxt Router Firmware 42.103.1.5095 - Remote Code Execution (RCE) (Authenticated)	2023-04-01
PoC in GitHub	geniuszly/CVE-2022-44149	2024-08-09
PoC in GitHub	yerodin/CVE-2022-44149	2023-01-06

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	CVE List, EUVD, Exploit-DB, GitHub Advisories, NVD, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-44149 is a high vulnerability (CVSS 8.8) in Nexxtsolutions Amp300 Firmware, published January 6, 2023. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 64.4%, the 99th percentile. No source names a fixed version.