PT-2023-14717

Name of the Vulnerable Software and Affected Versions Aztech WMB250AC Mesh Routers Firmware Version 016 2020 Description The issue concerns improper session management in the affected devices, allowing remote attackers to bypass authentication and execute arbitrary commands with administrator...

PT-2023-14716

Name of the Vulnerable Software and Affected Versions Aztech WMB250AC Mesh Routers Firmware Version 016 2020 Description The issue allows attackers to gain escalated privileges under specific conditions related to a given account's hashed password, due to PHP Type Juggling in the file...

CVE-2022-45600: Improper Neutralization of Special Elements used in a Command

Aztech WMB250AC Mesh Routers Firmware Version 016 2020 devices improperly manage sessions, which allows remote attackers to bypass authentication in opportunistic circumstances and execute arbitrary commands with administrator privileges by leveraging an existing web portal login...

CVE-2022-45599: Insufficiently Protected Credentials

Aztech WMB250AC Mesh Routers Firmware Version 016 2020 is vulnerable to PHP Type Juggling in file /var/www/login.php, allows attackers to gain escalated privileges only when specific conditions regarding a given accounts hashed password...