NVD disclosure day

Published threat advisories for March 3, 2023

CVE-2022-45553

Shenzhen ZBT WE1626 Router Command Execution via UART

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A vulnerability in Shenzhen Zhibotong Electronics WBT WE1626 routers allows for arbitrary command execution. Exploitation requires physical access to the device's serial port, limiting the potential impact to local environments. The primary concern is confirming the presence of this technology within your infrastructur

NVD published: March 3, 2023

CVE advisoryCRITICAL

CVE-2022-45551

ZBT WE1626 Router Privilege Escalation via Network Diagnosis

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A critical vulnerability in a ZBT router's network diagnosis feature allows attackers to escalate privileges via a WGET command. If reachable, this could lead to elevated control over the device, impacting network services and potentially exposing sensitive data. Confirming the presence and exposure of this router mode

NVD published: March 3, 2023