CVE-2026-31850
6.8
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow more
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less
Source: 309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c (Secondary)
Description
Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 stores sensitive information, including administrative credentials and WiFi pre-shared keys, in plaintext within exported configuration backup files. These backup files can be obtained through legitimate functionality or other weaknesses and do not apply encryption or hashing, allowing attackers to directly extract sensitive information.
Affected (1)
Products: Nexxtsolutions: Nebula300plus Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 12.01.01.37 |
| Running on/with | Platform Versions |
|---|---|
Nexxtsolutions Nebula300plus | All versions |
Related CWEs
References (2)
Source: 309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c
Product
Source: 309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c
Product
Timeline
No history available yet.