CVE-2024-22069

Permission and Access Control Vulnerability in ZXV10 XT802/ET301

CVSS 7.1 HIGHEPSS 0.2%CWE-269

There is a permission and access control vulnerability of ZTE's ZXV10 XT802/ET301 product.Attackers with common permissions can log in the terminal web and change the password of the administrator illegally by intercepting requests to change the passwords.

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:L

Affected products

ZTE · ZXV10 ET301 ZTE · ZXV10 XT802

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1036424