CVE-2022-45552
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk48th percentile - higher than 48% of all known CVEs
Summary
An insecure permissions vulnerability in the ZBT WE1626 router allows attackers to obtain sensitive information via the SPI bus interface connected to the NAND flash memory pinout.
Risk Assessment
An attacker with physical access to the device can read data stored in flash memory, including network configuration, passwords, or other sensitive information, leading to confidentiality and network security breaches.
Recommendation
It is recommended to update the router firmware to the latest version and secure physical access to the device to prevent unauthorized interaction with the SPI interface.
Other vulnerabilities in ZBT WE1626 Router
Original NVD description (English source)
An Insecure Permissions vulnerability in Shenzhen Zhiboton Electronics ZBT WE1626 Router v 21.06.18 allows attackers to obtain sensitive information via SPI bus interface connected to pinout of the NAND flash memory.