CVE-2022-46080
Published: 06 July 2023
Summary
CVE-2022-46080 is a critical-severity Incorrect Authorization (CWE-863) vulnerability in Nexxtsolutions Nebula1200-Ac Firmware. Its CVSS base score is 9.8 (Critical).
Operationally, ranked in the top 5.2% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
Nexxt Nebula 1200-AC firmware version 15.03.06.60 is affected by an authentication bypass vulnerability that allows an attacker to enable the TELNET service through the HTTPD component. The issue is identified as CVE-2022-46080 with a CVSS v3.1 score of 9.8 and is associated with CWE-863 for incorrect authorization. The flaw resides in the device's web service handling, which fails to enforce proper access controls before permitting TELNET activation.
Remote unauthenticated attackers can exploit the vulnerability over the network to bypass authentication and achieve arbitrary command execution on the device. Successful attacks result in full compromise of confidentiality, integrity, and availability without requiring user interaction or credentials.
Public references include a GitHub repository containing exploit details and the vendor site at nexxtsolutions.com, though no specific mitigation guidance or patch information is provided in the available sources. The EPSS score currently stands at 0.1519 with a peak of 0.1839, reflecting moderate and sustained exploitation interest after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-48918
Vulnerability details
Nexxt Nebula 1200-AC 15.03.06.60 allows authentication bypass and command execution by using the HTTPD service to enable TELNET.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Periodic review and update of procedures reduces incorrect authorization implementations over time.
Supervision identifies cases where authorization logic incorrectly permits unauthorized actions.
Defining permitted attribute values and auditing modifications reduces the chance of incorrect authorization outcomes due to tampered or missing labels.
The authorization process and usage restrictions help prevent incorrect authorization for remote access types.
Establishing configuration and connection requirements helps ensure correct rather than incorrect authorization for wireless access.
Establishing connection authorization processes for mobile devices helps ensure authorization decisions are correctly implemented rather than incorrect.
Monitoring account use, notifying on changes, and reviewing accounts for compliance corrects incorrect authorization assignments.
Ensures authorization decisions for external system use are correctly implemented and enforced.