CVE-2022-45551

critical · 9.8

An issue discovered in Shenzhen Zhiboton Electronics ZBT WE1626 Router v 21.06.18 allows attackers to escalate privileges via WGET command to the Network Diagnosis endpoint.

9.8

CVSS

23.6%

EPSS (exploit prob.)

98th

EPSS percentile

2023-03-03

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-306

Affected products

Vendor	Product	Affected versions
zbt	we1626_firmware	21.06.18
zbt	we1626	all versions

Check a specific version with /api/v1/cve/match.

References

https://blog.prodefense.io/zbt-we1626-wireless-router-cve-disclosures-b3534484d97d
https://blog.prodefense.io/zbt-we1626-wireless-router-cve-disclosures-b3534484d97d

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2022-45551