Nebula300Plus Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:nexxtsolutions:nebula300plus_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Nexxtsolutions (ee5e0b19-2c66-5715-9a0a-b97976c073c4) |
|---|---|
| Product | Nebula300Plus Firmware (247aa5dd-3651-58df-9369-fe9ab405db6a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-31851 |
vulnerable | 2026-06-08 07:57:15.977938 |
Nexxt Nebula 300+ - Lack of Rate Limiting Enables Brute-Force Attacks
Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 does not implement rate limiting or account lockout mechanisms on authentication interfaces. An attacker can perform unlimited authentication attempts against endpoints that rely on credential validation, enabling brute-force attacks to guess administrative credentials without restriction.
Published: 2026-03-23T12:21:54.907Z
Updated: 2026-08-10T11:30:18.422Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-31850 |
vulnerable | 2026-06-08 07:57:15.977472 |
Plaintext Storage of Credentials in Configuration Backup in Nexxt Nebula 300+
Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 stores sensitive information, including administrative credentials and WiFi pre-shared keys, in plaintext within exported configuration backup files. These backup files can be obtained through legitimate functionality or other weaknesses and do not apply encryption or hashing, allowing attackers to directly extract sensitive information.
Published: 2026-03-23T12:21:41.917Z
Updated: 2026-08-10T11:43:45.944Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-31849 |
vulnerable | 2026-06-08 07:57:15.976998 |
Missing CSRF Protection on Administrative Endpoints in Nexxt Nebula 300+
Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 does not implement CSRF protections on state-changing endpoints such as /goform/setSysTools and other administrative interfaces. As a result, an attacker can craft malicious web requests that are executed in the context of an authenticated administrator’s browser, leading to unauthorized configuration changes, including enabling services or modifying system settings.
Published: 2026-03-23T12:16:59.624Z
Updated: 2026-08-10T11:43:43.893Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-31848 |
vulnerable | 2026-06-08 07:57:15.976505 |
Reversible ecos_pw Cookie Allows Authentication Bypass in Nexxt Nebula 300+
Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 uses the ecos_pw cookie for authentication, which contains Base64-encoded credential data combined with a static suffix. Because the encoding is reversible and lacks integrity protection, an attacker can reconstruct or forge a valid cookie value without proper authentication.
Published: 2026-03-23T12:09:30.338Z
Updated: 2026-08-10T11:43:41.847Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-31847 |
vulnerable | 2026-06-08 07:57:15.975332 |
Hidden Functionality Enables Remote Telnet Activation via /goform/setSysTools in Nexxt Nebula 300+
Hidden functionality in the /goform/setSysTools endpoint in Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 allows remote enablement of a Telnet service. By sending a crafted POST request with parameters such as telnetManageEn=true and telnetPwd, an authenticated attacker can activate a Telnet service on port 23.
Published: 2026-03-23T12:07:05.062Z
Updated: 2026-08-10T11:43:39.725Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.