CVE-2022-47848: Bezeq Vtech IAD604-Il Firmware

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

An issue was discovered in Bezeq Vtech NB403-IL version BZ_2.02.07.09.13.01 and Vtech IAD604-IL versions BZ_2.02.07.09.13.01, BZ_2.02.07.09.13T, and BZ_2.02.07.09.09T, allows remote attackers to gain sensitive information via rootDesc.xml page of the UPnP service.

Affected products

• Bezeq Vtech IAD604-Il Firmware: version bz_2.02.07.09.09t only; version bz_2.02.07.09.13.01 only; version bz_2.02.07.09.13t only
• Bezeq Vtech NB403-Il Firmware: version bz_2.02.07.09.13.01 only

Published 2023-09-15. Last modified 2026-06-17.