9.1

CVE-2022-23144

There is a broken access control vulnerability in ZTE ZXvSTB product. Due to improper permission control, attackers could use this vulnerability to delete the default application type, which affects normal use of system.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zte ≫ Zxa10 B76hv3 Firmware Version <= 2.01.02.01
   Zte ≫ Zxa10 B76hv3 Version -
Zte ≫ Zxa10 B766v2 Firmware Version <= 2.01.02.01
   Zte ≫ Zxa10 B766v2 Version -
Zte ≫ Zxa10 B800v2 Firmware Version <= 2.01.02.01
   Zte ≫ Zxa10 B800v2 Version -
Zte ≫ Zxa10 B860av2.1 Firmware Version <= 2.01.02.01
   Zte ≫ Zxa10 B860av2.1 Version -
Zte ≫ Zxa10 B860h Firmware Version <= 2.01.02.01
   Zte ≫ Zxa10 B860h Version -
Zte ≫ Zxa10 B866v2-h Firmware Version <= 2.01.02.01
   Zte ≫ Zxa10 B866v2-h Version -
Zte ≫ Zxa10 B866v5-w10 Firmware Version <= 2.01.02.01
   Zte ≫ Zxa10 B866v5-w10 Version -
Zte ≫ Zxa10 B960gv1 Firmware Version <= 2.01.02.01
   Zte ≫ Zxa10 B960gv1 Version -
Zte ≫ Zxa10 B710c-a12 Firmware Version <= 2.01.02.01
   Zte ≫ Zxa10 B710c-a12 Version -
Zte ≫ Zxa10 B710s2-a19 Firmware Version <= 2.01.02.01
   Zte ≫ Zxa10 B710s2-a19 Version -
Zte ≫ Zxa10 B836ct-a15 Firmware Version <= 2.01.02.01
   Zte ≫ Zxa10 B836ct-a15 Version -
Zte ≫ Zxa10 S100v Firmware Version <= 2.01.02.01
   Zte ≫ Zxa10 S100v Version -
Zte ≫ Zxa10 S200a Firmware Version <= 2.01.02.01
   Zte ≫ Zxa10 S200a Version -
Zte ≫ Zxa10 S200t Firmware Version <= 2.01.02.01
   Zte ≫ Zxa10 S200t Version -
Zte ≫ Zxa10 B700v7 Firmware Version <= 2.01.02.01
   Zte ≫ Zxa10 B700v7 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.7% 0.492
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.1 3.9 5.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CISA-ADP 9.1 3.9 5.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1026224
Vendor Advisory