CVE-2022-47848

2023-09-1500:00:00

mitre

www.cve.org

cve-2022-47848

bezeq vtech

nb403-il

iad604-il

information disclosure

upnp service

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.7%

JSON

An issue was discovered in Bezeq Vtech NB403-IL version BZ_2.02.07.09.13.01 and Vtech IAD604-IL versions BZ_2.02.07.09.13.01, BZ_2.02.07.09.13T, and BZ_2.02.07.09.09T, allows remote attackers to gain sensitive information via rootDesc.xml page of the UPnP service.

References

00xbyte.github.io/posts/bezeq-router-auth-bypass/