Lucene search

[email protected]CVE-2022-47848

HistorySep 15, 2023 - 4:15 p.m.

CVE-2022-47848

2023-09-1516:15:07

CWE-287

[email protected]

web.nvd.nist.gov

cve-2022-47848

bezeq

vtech

nb403-il

iad604-il

sensitive information disclosure

upnp

security vulnerability

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.7%

JSON

An issue was discovered in Bezeq Vtech NB403-IL version BZ_2.02.07.09.13.01 and Vtech IAD604-IL versions BZ_2.02.07.09.13.01, BZ_2.02.07.09.13T, and BZ_2.02.07.09.09T, allows remote attackers to gain sensitive information via rootDesc.xml page of the UPnP service.

Affected configurations

NVD

Node

bezeqvtech_nb403-ilMatch-

AND

bezeqvtech_nb403-il_firmwareMatchbz_2.02.07.09.13.01

Node

bezeqvtech_iad604-ilMatch-

AND

bezeqvtech_iad604-il_firmwareMatchbz_2.02.07.09.09t

bezeqvtech_iad604-il_firmwareMatchbz_2.02.07.09.13.01

bezeqvtech_iad604-il_firmwareMatchbz_2.02.07.09.13t

CPENameOperatorVersion
bezeq:vtech_nb403-il_firmwarebezeq vtech nb403-il firmwareeqbz_2.02.07.09.13.01

CPE	Name	Operator	Version
bezeq:vtech_nb403-il_firmware	bezeq vtech nb403-il firmware	eq	bz_2.02.07.09.13.01

References

00xbyte.github.io/posts/bezeq-router-auth-bypass/

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.7%

JSON

Related for CVE-2022-47848

prion1 nvd1 cvelist1