Advisories · Technology
Nexxt Solutions Nebula 300+.
Every CVE that names Nexxt Solutions Nebula 300+ among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.7 High
Nexxt Nebula 300+ - Lack of Rate Limiting Enables Brute-Force Attacks
- Nexxt Solutions Nebula 300+
- Authentication bypass
- CVSS 6.8 Medium
Plaintext Storage of Credentials in Configuration Backup in Nexxt Nebula 300+
- Nexxt Solutions Nebula 300+
- CWE-256
- CVSS 7.2 High
Missing CSRF Protection on Administrative Endpoints in Nexxt Nebula 300+
- Nexxt Solutions Nebula 300+
- Cross-site request forgery (CSRF)
- CVSS 8.7 High
Reversible ecos_pw Cookie Allows Authentication Bypass in Nexxt Nebula 300+
- Nexxt Solutions Nebula 300+
- Information disclosure
- CVSS 8.5 High
Hidden Functionality Enables Remote Telnet Activation via /goform/setSysTools in Nexxt Nebula 300+
- Nexxt Solutions Nebula 300+
- CWE-912