CyberSecBulletin

Zbt vulnerabilities

We track 3 vulnerabilities in Zbt products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 3, 2023.

3vulnerabilities
2critical
1high
0exploited
9.0average CVSS score

Latest Zbt vulnerabilities

  • 9.8 Critical severity

    We1626 Firmware: Improper Control of Generation of Code

    CVE-2022-45553ZbtEPSS 1.1%

    An issue discovered in Shenzhen Zhibotong Electronics WBT WE1626 Router v 21.06.18 allows attacker to execute arbitrary commands via serial connection to the UART port.

  • 7.5 High severity

    We1626 Firmware: Incorrect Default Permissions

    CVE-2022-45552Zbt

    An Insecure Permissions vulnerability in Shenzhen Zhiboton Electronics ZBT WE1626 Router v 21.06.18 allows attackers to obtain sensitive information via SPI bus interface connected to pinout of the NAND flash memory.

  • 9.8 Critical severity

    We1626 Firmware: Missing Authentication for Critical Functionality

    CVE-2022-45551ZbtEPSS 23.6%

    An issue discovered in Shenzhen Zhiboton Electronics ZBT WE1626 Router v 21.06.18 allows attackers to escalate privileges via WGET command to the Network Diagnosis endpoint.