{"id":"CVE-2022-44149","aliases":["EUVD-2022-47099","GHSA-8m32-3cxw-hm8c"],"status":"published","title":"The web service on Nexxt Amp300 ARN02304U8 42.103.1.5095 devices allows remote OS command...","description":"The web service on Nexxt Amp300 ARN02304U8 42.103.1.5095 and 80.103.2.5045 devices allows remote OS command execution by placing \u0026telnetd in the JSON host field to the ping feature of the goform/sysTools component. Authentication is required","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.64354,"percentile":0.9924,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-78"],"published":"2023-01-06T00:00:00Z","modified":"2026-06-17T05:07:49Z","exploits":[{"source":"exploitdb","id":"EDB-51195","title":"Nexxt Router Firmware 42.103.1.5095 - Remote Code Execution (RCE) (Authenticated)","type":"remote","platform":"hardware","date":"2023-04-01","url":"https://www.exploit-db.com/exploits/51195"},{"source":"pocgithub","id":"geniuszly/CVE-2022-44149","title":"geniuszly/CVE-2022-44149","date":"2024-08-09","url":"https://github.com/geniuszly/CVE-2022-44149"},{"source":"pocgithub","id":"yerodin/CVE-2022-44149","title":"yerodin/CVE-2022-44149","date":"2023-01-06","url":"https://github.com/yerodin/CVE-2022-44149"}],"products":[{"vendor":"nexxtsolutions","product":"amp300_firmware"}],"references":[{"url":"http://packetstormsecurity.com/files/170366/Nexxt-Router-Firmware-42.103.1.5095-Remote-Code-Execution.html","tags":["x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://cxsecurity.com/issue/WLB-2023010006","tags":["x_transferred","Exploit","Third Party Advisory"]},{"url":"https://www.nexxtsolutions.com/connectivity/search/?q=ARN02304U8","tags":["x_transferred","Product","Vendor Advisory"]},{"url":"https://packetstormsecurity.com/files/170366/Nexxt-Router-Firmware-42.103.1.5095-Remote-Code-Execution.html","tags":["x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/170366/Nexxt-Router-Firmware-80.103.2.5045-Remote-Code-Execution.html","tags":["x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-44149"},{"url":"https://github.com/advisories/GHSA-8m32-3cxw-hm8c"}],"sources":{"cve":[{"id":"CVE-2022-44149","description":"The web service on Nexxt Amp300 ARN02304U8 42.103.1.5095 and 80.103.2.5045 devices allows remote OS command execution by placing \u0026telnetd in the JSON host field to the ping feature of the goform/sysTools component. Authentication is required","status":"published","published":"2023-01-06T00:00:00Z","modified":"2025-04-09T20:41:36.183Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:34:30.176321Z"}],"euvd":[{"id":"EUVD-2022-47099","description":"The web service on Nexxt Amp300 ARN02304U8 42.103.1.5095 and 80.103.2.5045 devices allows remote OS command execution by placing \u0026telnetd in the JSON host field to the ping feature of the goform/sysTools component. Authentication is required","status":"published","published":"2023-01-06T00:00:00Z","modified":"2025-04-09T20:41:36Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:52:37.733624Z"}],"ghsa":[{"id":"GHSA-8m32-3cxw-hm8c","title":"The web service on Nexxt Amp300 ARN02304U8 42.103.1.5095 devices allows remote OS command...","description":"The web service on Nexxt Amp300 ARN02304U8 42.103.1.5095 devices allows remote OS command execution by placing \u0026telnetd in the JSON host field to the ping feature of the goform/sysTools component. Authentication is required.","status":"published","published":"2023-01-06T18:30:19Z","modified":"2023-01-27T21:16:22Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:43:22.211542Z"}],"nvd":[{"id":"CVE-2022-44149","description":"The web service on Nexxt Amp300 ARN02304U8 42.103.1.5095 and 80.103.2.5045 devices allows remote OS command execution by placing \u0026telnetd in the JSON host field to the ping feature of the goform/sysTools component. Authentication is required","status":"published","published":"2023-01-06T17:15:09.363Z","modified":"2026-06-17T05:07:49.31Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:07:34.758863Z"}]}}