CVSS v3
8.8
HIGH
EPSS Score
82.7%
exploit probability
CISA KEV
No
known exploited
Exploitation
—
SSVC status
The web service on Nexxt Amp300 ARN02304U8 42.103.1.5095 and 80.103.2.5045 devices allows remote OS command execution by placing &telnetd in the JSON host field to the ping feature of the goform/sysTools component. Authentication is required
The web service on Nexxt Amp300 ARN02304U8 42.103.1.5095 and 80.103.2.5045 devices allows remote OS command execution by placing &telnetd in the JSON host field to the ping feature of the goform/sysTools component. Authentication is required
Active exploitation of CVE-2022-44149 has not been confirmed. The EPSS score is 82.7%, indicating the estimated probability of exploitation in the next 30 days.
CVE-2022-44149 has a CVSS v3 base score of 8.8 (HIGH severity).
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
Ranked by exploit probability (EPSS).