CVE-2022-45600

Katalog CVE

CVSS 8.8 · High EPSS 2,3%

Kerentanan Improper Neutralization of Special Elements used in a Command ('Command Injection') pada aztech wmb250ac firmware. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

Aztech WMB250AC Mesh Routers Firmware Version 016 2020 devices improperly manage sessions, which allows remote attackers to bypass authentication in opportunistic circumstances and execute arbitrary commands with administrator privileges by leveraging an existing web portal login.

Rincian

Terbit di NVD

22 Februari 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')

EPSS (30 hari)

2,3% peluang dieksploitasi; lebih tinggi dari 83,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/ethancunt/CVE-2022-45600 exploit · advisory pihak ketiga