CVE Catalog

CVE-2022-45551

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
23.46%

98th percentile - higher than 98% of all known CVEs

Summary

An issue discovered in Shenzhen Zhiboton Electronics ZBT WE1626 Router v 21.06.18 allows attackers to escalate privileges via WGET command to the Network Diagnosis endpoint.

Risk Assessment

The risk involves an attacker gaining elevated privileges, potentially leading to full device and network compromise.

Recommendation

It is recommended to immediately update the router firmware to the latest version and restrict access to the administrative interface.

Original NVD description (English source)

An issue discovered in Shenzhen Zhiboton Electronics ZBT WE1626 Router v 21.06.18 allows attackers to escalate privileges via WGET command to the Network Diagnosis endpoint.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS