PT-2023-14717 · Aztech · Aztech Wmb250Ac Mesh Routers

Tanyeetat · Publicado 2023-02-22 · Atualizado 2025-03-17 · CVE-2022-45600

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Aztech WMB250AC Mesh Routers Firmware Version 016 2020

Description The issue concerns improper session management in the affected devices, allowing remote attackers to bypass authentication and execute arbitrary commands with administrator privileges under certain circumstances. This can be achieved by leveraging an existing web portal login.

Recommendations For Aztech WMB250AC Mesh Routers Firmware Version 016 2020, update the firmware to a version that properly manages sessions and prevents unauthorized access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

CVE-2022-45600

Produtos afetados

Aztech Wmb250Ac Mesh Routers

Referências · 5

• 🔥 https://github.com/ethancunt/CVE-2022-45600 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-45600 · Nota de Segurança
• https://t.me/cvenotify/115089 · Publicação no Telegram
• https://t.me/cibsecurity/58719 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2022-45600 · Aviso do Fabricante