CVE-2022-47848

7.5 highEPSS 1.0%

High (7.5) in bezeq. EPSS 1.0% chance of exploitation in the next 30 days.

An issue was discovered in Bezeq Vtech NB403-IL version BZ_2.02.07.09.13.01 and Vtech IAD604-IL versions BZ_2.02.07.09.13.01, BZ_2.02.07.09.13T, and BZ_2.02.07.09.09T, allows remote attackers to gain sensitive information via rootDesc.xml page of the UPnP service.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2023-09-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

bezeq:vtech_iad604-il_firmware
bezeq:vtech_nb403-il_firmware

References

https://00xbyte.github.io/posts/bezeq-router-auth-bypass/
https://00xbyte.github.io/posts/bezeq-router-auth-bypass/

Check your stack JSON