CVE-2022-45551

CRITICAL

ZBT WE1626 Router 21.06.18 - Privilege Escalation via Network Diagnosis WGET Command

Title source: llm

Description

An issue discovered in Shenzhen Zhiboton Electronics ZBT WE1626 Router v 21.06.18 allows attackers to escalate privileges via WGET command to the Network Diagnosis endpoint.

References (3)

Core 3

Core References

Broken Link

http://shenzhen.com

Vendor Advisory

http://zbt.com

Third Party Advisory

https://blog.prodefense.io/zbt-we1626-wireless-router-cve-disclosures-b3534484d97d

Scores

CVSS v3 9.8

EPSS 0.2513

EPSS Percentile 97.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-306

Status published

Products (1)

zbt/we1626_firmware 21.06.18

Published Mar 03, 2023

Tracked Since Feb 18, 2026