CVE-2022-45551

CVE-2022-45551 is a critical privilege escalation vulnerability affecting Shenzhen Zhiboton Electronics ZBT WE1626 Routers running firmware version 21.06.18. Attackers can exploit this flaw by injecting WGET commands into the Network Diagnosis endpoint. With a CVSS score of 9.8, this vulnerability is easily exploitable over the network with no user interaction, leading to complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or publicly available exploit code in Metasploit or ExploitDB, the vulnerability has garnered significant community discussion, indicating potential interest from threat actors.