CVE-2023-37214

Heights Telecom ERO1xS-Pro Dual-Band WiFi command injection

Critical · published July 30, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
53.6
In the wild
Unconfirmed
What it is

🚨 A critical vulnerability in Heights Telecom's ERO1xS-Pro Dual-Band firewall could leave your network wide open! 🔥 Think of this flaw as a hotel that forgot to lock its main entrance. Any unauthorized guest can stroll in without a key, compromising the safety of everyone inside. 🏨 If exploited, an attacker could gain unrestricted access to your network, putting sensitive data at risk and potentially allowing for further malicious actions. This could lead to data breaches, system compromises, and an absolute nightmare for your organization. Imagine waking up to find your digital valuables are now in the hands of a stranger!

Put simply

Think of this flaw as a hotel that forgot to lock its main entrance. Any unauthorized guest can stroll in without a key, compromising the safety of everyone inside. 🏨 The vulnerability arises from a lack of proper access controls in the firewall's settings, allowing unauthorized users to bypass protections and manipulate network traffic without authentication.

What to do

If exploited, an attacker could gain unrestricted access to your network, putting sensitive data at risk and potentially allowing for further malicious actions. This could lead to data breaches, system compromises, and an absolute nightmare for your organization. Imagine waking up to find your digital valuables are now in the hands of a stranger! Immediately patch your device to version BZ_ERO1XP.026 or newer to close this security hole. Review your firewall configurations and enhance monitoring to detect any unauthorized access attempts. Don’t wait—act now! You've got this! By following these steps, you'll be securing your network like a pro! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00726 · 53.6th percentile
Published
2023-07-30T08:33Z
EPSS history
Timeline
  • 30 JUL 08:33Z
    Heights Telecom ERO1xS-Pro Dual-Band WiFi command injection
    cvelistv5