CVE-2022-45599

2023-02-2200:00:00

mitre

www.cve.org

aztech

wmb250ac

mesh routers

firmware

php type juggling

escalated privileges

hashed password

AI Score

9.8

Confidence

High

EPSS

0.003

Percentile

69.2%

JSON

Aztech WMB250AC Mesh Routers Firmware Version 016 2020 is vulnerable to PHP Type Juggling in file /var/www/login.php, allows attackers to gain escalated privileges only when specific conditions regarding a given accounts hashed password.

References

github.com/ethancunt/CVE-2022-45599