Lucene search

China National Vulnerability DatabaseCNVD-2022-85533

HistoryNov 24, 2022 - 12:00 a.m.

ZTE MF286R SQL Injection Vulnerability

2022-11-2400:00:00

China National Vulnerability Database

www.cnvd.org.cn

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

JSON

The ZTE MF286R is a wireless router from ZTE Corporation (China).A SQL injection vulnerability exists in previous versions of the ZTE MF286R mf286r_b07, which stems from insufficient validation of the input parameters of the phonebook interface. An authenticated attacker could use this vulnerability to perform arbitrary SQL injection.

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

JSON

Related for CNVD-2022-85533