CVE-2022-44149

This exploit targets a command injection vulnerability in Nexxt Router Firmware 42.103.1.5095. It authenticates with the router and sends a malicious payload via the `sysTools` endpoint to enable telnetd, allowing remote code execution.

The repository contains a Python script and README for CVE-2022-44149, but the payload is a placeholder ('example_payload') and lacks actual exploit logic. It demonstrates authentication and payload delivery structure but does not implement the vulnerability.

This PoC exploits an authenticated RCE vulnerability in Nexxt Router Firmware 80.103.2.5045 by sending a malicious payload via the sysTools endpoint to enable telnetd. It requires valid credentials and leverages command injection in the host parameter.

This repository contains a functional Python script that exploits CVE-2022-44149, a vulnerability allowing arbitrary command execution via the router's web interface. The script includes authentication handling, payload delivery, and logging for analysis.