CVE-2025-65128

The Shenzhen Zhibotong Electronics ZBT WE2001 (version 23.09.27 ) is vulnerable to a missing authentication mechanism within its web management API components. An unauthenticated attacker on the local network can modify router and network configurations by invoking operations ending with *_nocomm...

CVE-2025-65128

A missing authentication mechanism in the web management API components of Shenzhen Zhibotong Electronics ZBT WE2001 23.09.27 allows unauthenticated attackers on the local network to modify router and network configurations. By invoking operations whose names end with "nocommit" and supplying the...