Nexxt Solutions Nebula 300+ Unauthenticated Credential Disclosure Vulnerability

A vulnerability allowing unauthenticated credential disclosure has been identified in the Nexxt Solutions Nebula 300+ wireless router, specifically in the firmware version Nebula300+_v12.01.01.37. This vulnerability resides in the /goform/ate endpoint, where an adjacent attacker can obtain the administrator password in Base64-encoded form by sending a crafted HTTP request. The extracted credential can be used to authenticate to the device, potentially leading to further compromise when combined with other existing weaknesses in the firmware.

Impact

Exploitation of this vulnerability allows for unauthorized access to the device with administrative privileges, which could be used to exploit other vulnerabilities in the firmware, leading to a more significant compromise.