CRITICAL🇵🇱 Wersja polska

CVE-2022-23144

CVSS 9.1v3.1pub. 2022-09-23upd. 2025-05-22

There is a broken access control vulnerability in ZTE ZXvSTB product. Due to improper permission control, attackers could use this vulnerability to delete the default application type, which affects normal use of system.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

  • Zte Zxa10 B700v7

    HW
    Zte
    all versions

  • Zte Zxa10 B700v7 Firmware

    OS
    Zte
    ≤ 2.01.02.01

  • Zte Zxa10 B710c A12

    HW
    Zte
    all versions

  • Zte Zxa10 B710c A12 Firmware

    OS
    Zte
    ≤ 2.01.02.01

  • Zte Zxa10 B710s2 A19

    HW
    Zte
    all versions

  • Zte Zxa10 B710s2 A19 Firmware

    OS
    Zte
    ≤ 2.01.02.01

  • Zte Zxa10 B766v2

    HW
    Zte
    all versions

  • Zte Zxa10 B766v2 Firmware

    OS
    Zte
    ≤ 2.01.02.01

  • Zte Zxa10 B76hv3

    HW
    Zte
    all versions

  • Zte Zxa10 B76hv3 Firmware

    OS
    Zte
    ≤ 2.01.02.01

  • Zte Zxa10 B800v2

    HW
    Zte
    all versions

  • Zte Zxa10 B800v2 Firmware

    OS
    Zte
    ≤ 2.01.02.01

  • Zte Zxa10 B836ct A15

    HW
    Zte
    all versions

  • Zte Zxa10 B836ct A15 Firmware

    OS
    Zte
    ≤ 2.01.02.01

  • Zte Zxa10 B860av2.1

    HW
    Zte
    all versions

  • Zte Zxa10 B860av2.1 Firmware

    OS
    Zte
    ≤ 2.01.02.01

  • Zte Zxa10 B860h

    HW
    Zte
    all versions

  • Zte Zxa10 B860h Firmware

    OS
    Zte
    ≤ 2.01.02.01

  • Zte Zxa10 B866v2 H

    HW
    Zte
    all versions

  • Zte Zxa10 B866v2 H Firmware

    OS
    Zte
    ≤ 2.01.02.01

  • Zte Zxa10 B866v5 W10

    HW
    Zte
    all versions

  • Zte Zxa10 B866v5 W10 Firmware

    OS
    Zte
    ≤ 2.01.02.01

  • Zte Zxa10 B960gv1

    HW
    Zte
    all versions

  • Zte Zxa10 B960gv1 Firmware

    OS
    Zte
    ≤ 2.01.02.01

  • Zte Zxa10 S100v

    HW
    Zte
    all versions

  • Zte Zxa10 S100v Firmware

    OS
    Zte
    ≤ 2.01.02.01

  • Zte Zxa10 S200a

    HW
    Zte
    all versions

  • Zte Zxa10 S200a Firmware

    OS
    Zte
    ≤ 2.01.02.01

  • Zte Zxa10 S200t

    HW
    Zte
    all versions

  • Zte Zxa10 S200t Firmware

    OS
    Zte
    ≤ 2.01.02.01
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2024-10119CRITICAL9.8PL ✓same vendor

Command injection w routerze SECOM WRTM326 — zdalne wykonanie poleceń

CVE-2022-39073CRITICAL9.8PL ✓same vendor

Command injection w ZTE MF286R — wykonanie dowolnych poleceń

CVE-2022-39070CRITICAL9.8PL ✓same vendor

Błąd kontroli dostępu w urządzeniach ZTE PON OLT umożliwia zdalne logowanie

CVE-2021-21748CRITICAL9.8PL ✓same vendor

Stack-based buffer overflow w ZTE MF971R — możliwość RCE

CVE-2021-21749CRITICAL9.8PL ✓same vendor

ZTE MF971R — krytyczne podatności stack-based buffer overflow umożliwiające RCE