CVE-2022-45599

Aztech WMB250AC Mesh Routers Firmware Version 016 2020 is vulnerable to PHP Type Juggling in file /var/www/login.php, allows attackers to gain escalated privileges only when specific conditions regarding a given accounts hashed password.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-02-22

Last modified

2025-03-17

Weaknesses

CWE-522

Affected products

• Wmb250ac Firmware (Aztech)

References

• https://github.com/ethancunt/CVE-2022-45599