Design/Logic Flaw

2023-09-1516:15:00

PRIOn knowledge base

www.prio-n.com

design flaw

logic flaw

bezeq vtech nb403-il

vtech iad604-il

upnp service

sensitive information

remote attackers

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.7%

JSON

An issue was discovered in Bezeq Vtech NB403-IL version BZ_2.02.07.09.13.01 and Vtech IAD604-IL versions BZ_2.02.07.09.13.01, BZ_2.02.07.09.13T, and BZ_2.02.07.09.09T, allows remote attackers to gain sensitive information via rootDesc.xml page of the UPnP service.

CPENameOperatorVersion
vtech_iad604-il_firmwareeqbz-2.2.7.9.9t
vtech_iad604-il_firmwareeqbz-2.2.7.9.13.1
vtech_iad604-il_firmwareeqbz-2.2.7.9.13t
vtech_nb403-il_firmwareeqbz-2.2.7.9.13.1

Name	Operator	Version
vtech_iad604-il_firmware	eq	bz-2.2.7.9.9t
vtech_iad604-il_firmware	eq	bz-2.2.7.9.13.1
vtech_iad604-il_firmware	eq	bz-2.2.7.9.13t
vtech_nb403-il_firmware	eq	bz-2.2.7.9.13.1

References

00xbyte.github.io/posts/bezeq-router-auth-bypass/