CVE-2022-45551

An issue discovered in Shenzhen Zhiboton Electronics ZBT WE1626 Router v 21.06.18 allows attackers to escalate privileges via WGET command to the Network…

Critical · published March 3, 2023

CVSS v3.1
9.8
EPSS
24%
Percentile
97.8
In the wild
Unconfirmed
What it is

🚨 A simple WGET command can elevate privileges on the ZBT WE1626 Router! This is a perilous oversight that puts your network at risk. 🔥 Think of it like a technician who walks into a server room and just says ‘trust me’ to the security guard — there’s no verification, and they can access anything they want! If an attacker exploits this privilege escalation flaw, they could gain full control of the router, leading to absolute chaos in your network. They could reroute traffic, steal sensitive data, or even turn your router into a launching pad for further attacks!

Put simply

Think of it like a technician who walks into a server room and just says ‘trust me’ to the security guard — there’s no verification, and they can access anything they want! This vulnerability allows attackers to use the WGET command on the Network Diagnosis endpoint of the ZBT WE1626 Router, enabling them to bypass authentication and escalate their privileges without any complexity.

What to do

If an attacker exploits this privilege escalation flaw, they could gain full control of the router, leading to absolute chaos in your network. They could reroute traffic, steal sensitive data, or even turn your router into a launching pad for further attacks! Patch your ZBT WE1626 Router to version 21.06.18 immediately to secure it against this vulnerability. Additionally, review your network configuration to ensure that no unnecessary services are exposed publicly. You've got this! With these steps, you’ll bolster your network security like a pro! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.23636 · 97.8th percentile
Published
2023-03-03T00:00Z
EPSS history
Timeline
  • 03 MAR 00:00Z
    An issue discovered in Shenzhen Zhiboton Electronics ZBT WE1626 Router v 21.06.18 allows attackers to escalate privileges via WGET command to the Network…
    cvelistv5