Unscored CVE-2022-47848 EUVD-2022-50605GHSA-p9pj-5h58-c2c5

An issue was discovered in Bezeq Vtech NB403-IL version BZ_2.02.07.09.13.01 and Vtech IAD604-IL versions BZ_2.02.07.09.13.01, BZ_2.02.07.09…

Published Sep 15, 2023 · Updated Sep 25, 2024 · Assigned by mitre

Description

An issue was discovered in Bezeq Vtech NB403-IL version BZ_2.02.07.09.13.01 and Vtech IAD604-IL versions BZ_2.02.07.09.13.01, BZ_2.02.07.09.13T, and BZ_2.02.07.09.09T, allows remote attackers to gain sensitive information via rootDesc.xml page of the UPnP service.

References

https://00xbyte.github.io/posts/bezeq-router-auth-bypass/