CVE-2022-45600
Summary
| CVE | CVE-2022-45600 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-02-22 22:15:00 UTC |
| Updated | 2023-03-03 02:17:00 UTC |
| Description | Aztech WMB250AC Mesh Routers Firmware Version 016 2020 devices improperly manage sessions, which allows remote attackers to bypass authentication in opportunistic circumstances and execute arbitrary commands with administrator privileges by leveraging an existing web portal login. |
Risk And Classification
Problem Types: CWE-77
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Aztech | Wmb250ac | - | All | All | All |
| Operating System | Aztech | Wmb250ac Firmware | 016_2020 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| GitHub - ethancunt/CVE-2022-45600 | MISC | github.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.