PT-2023-14717 · Aztech · Aztech Wmb250Ac Mesh Routers

Tanyeetat · Published 2023-02-22 · Updated 2025-03-17 · CVE-2022-45600

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Aztech WMB250AC Mesh Routers Firmware Version 016 2020

Description The issue concerns improper session management in the affected devices, allowing remote attackers to bypass authentication and execute arbitrary commands with administrator privileges under certain circumstances. This can be achieved by leveraging an existing web portal login.

Recommendations For Aztech WMB250AC Mesh Routers Firmware Version 016 2020, update the firmware to a version that properly manages sessions and prevents unauthorized access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2022-45600

Affected Products

Aztech Wmb250Ac Mesh Routers

References · 5

• 🔥 https://github.com/ethancunt/CVE-2022-45600 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-45600 · Security Note
• https://osv.dev/vulnerability/CVE-2022-45600 · Vendor Advisory
• https://t.me/cvenotify/115089 · Telegram Post
• https://t.me/cibsecurity/58719 · Telegram Post