CVE-2022-45553

An issue discovered in Shenzhen Zhibotong Electronics WBT WE1626 Router v 21.06.18 allows attacker to execute arbitrary commands via serial connection to the…

published March 3, 2023

CVSS
—
EPSS
1%
Percentile
65.4
In the wild
Unconfirmed
What it is

🚨 A crafty little flaw in the Shenzhen Zhibotong Router lets attackers execute any command through the UART port! 🔥 Think of it like a secret entrance to a building that doesn’t have a proper lock—if someone finds it, they can just stroll in and take control! This UART port is that sneaky door, waiting for the wrong hands to exploit it. If someone gains access through this UART port, they can run arbitrary commands on the router. This could lead to unauthorized configuration changes, data leaks, or even a full takeover of the device, potentially jeopardizing your whole network! Yikes!

Put simply

Think of it like a secret entrance to a building that doesn’t have a proper lock—if someone finds it, they can just stroll in and take control! This UART port is that sneaky door, waiting for the wrong hands to exploit it. This vulnerability in the Shenzhen Zhibotong WE1626 Router allows an attacker to send arbitrary commands via the serial connection to the UART port, bypassing any normal security measures that would typically protect the device.

What to do

If someone gains access through this UART port, they can run arbitrary commands on the router. This could lead to unauthorized configuration changes, data leaks, or even a full takeover of the device, potentially jeopardizing your whole network! Yikes! To protect yourself, ensure that your router’s firmware is updated to the latest version and consider disabling access to the UART port unless absolutely necessary. Keeping an eye on network traffic can also help detect any unusual activity. 🛡️ You've got this! With these steps, you're on your way to securing your network! 🔒🚀

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01100 · 65.4th percentile
Published
2023-03-03T00:00Z
EPSS history
Timeline
  • 03 MAR 00:00Z
    An issue discovered in Shenzhen Zhibotong Electronics WBT WE1626 Router v 21.06.18 allows attacker to execute arbitrary commands via serial connection to the…
    cvelistv5