Lucene search

MitreCVELIST:CVE-2022-45600

HistoryFeb 22, 2023 - 12:00 a.m.

CVE-2022-45600

2023-02-2200:00:00

mitre

www.cve.org

aztech

wmb250ac

mesh routers

firmware

cve-2022-45600

remote attackers

authentication

arbitrary commands

web portal.

AI Score

9.5

Confidence

High

EPSS

0.004

Percentile

73.7%

JSON

Aztech WMB250AC Mesh Routers Firmware Version 016 2020 devices improperly manage sessions, which allows remote attackers to bypass authentication in opportunistic circumstances and execute arbitrary commands with administrator privileges by leveraging an existing web portal login.

References

github.com/ethancunt/CVE-2022-45600