CVE-2026-31847

HIGH

Hidden functionality allows remote Telnet enablement in Nexxt Nebula 300+

Title source: cna
STIX 2.1

Description

Hidden functionality in the /goform/setSysTools endpoint in Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 allows remote enablement of a Telnet service. By sending a crafted POST request with parameters such as telnetManageEn=true and telnetPwd, an authenticated attacker can activate a Telnet service on port 23. This exposes a privileged diagnostic interface that is not intended for external access and can be used to interact with the underlying system.

References (2)

Scores

CVSS v3 8.8
EPSS 0.0011
EPSS Percentile 28.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-912
Status published
Products (2)
Nexxt Solutions/Nebula 300+ <= 12.01.01.37 - Nebula300+_v12.01.01.37
nexxtsolutions/nebula300plus_firmware < 12.01.01.37
Published Mar 23, 2026
Tracked Since Mar 23, 2026