Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 writes administrative credentials and WiFi pre‑shared keys in plaintext within exported configuration backup files. The vulnerability, identified as CWE‑256, allows an attacker who can obtain a backup to read sensitive authentication information directly. This exposure can enable unauthorized access to the device’s administrative interface, compromise network security, and potentially allow lateral movement to other systems on the same WiFi network.

Affected products are Nexxt Solutions Nebula 300+. The issue exists in all firmware releases up to and including 12.01.01.37. No explicit later versions are listed as affected, therefore any device running a firmware version older than 12.01.01.38 may be vulnerable.

The CVSS score of 6.8 indicates medium severity. The EPSS score of less than 1 % suggests low current exploitation likelihood, and the vulnerability is not listed in the CISA KEV catalog. Attackers would need to obtain an exported configuration backup, which can occur through legitimate user functionality or potentially via other weaknesses that provide access to the backup export. While no remote code execution is available, the ability to read credentials directly provides a high‑impact means for privilege escalation and network compromise.