CVE Catalog

CVE-2022-45553

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.10%

62th percentile - higher than 62% of all known CVEs

Summary

An issue in the Shenzhen Zhibotong Electronics WBT WE1626 Router version 21.06.18 allows an attacker to execute arbitrary commands via a serial connection to the UART port.

Risk Assessment

An attacker with physical access to the device can gain full control, potentially compromising network integrity and data confidentiality.

Recommendation

It is recommended to restrict physical access to the router and implement authentication mechanisms for serial connections if feasible.

Original NVD description (English source)

An issue discovered in Shenzhen Zhibotong Electronics WBT WE1626 Router v 21.06.18 allows attacker to execute arbitrary commands via serial connection to the UART port.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS