CVE-2022-23144

🗓️ 23 Sep 2022 14:11:59Reported by zteType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 72 Views

There's a broken access control vulnerability in ZTE ZXvSTB product, allowing attackers to delete the default application type

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	ZTE ZXvSTB TV Access Control Data Deletion	27 Mar 202300:00	–	bdu_fstec
Circl	CVE-2022-23144	23 Sep 202218:19	–	circl
CNNVD	ZTE ZXvSTB security vulnerability	23 Sep 202200:00	–	cnnvd
CNVD	ZTE ZXvSTB License Issue Vulnerability	28 Sep 202200:00	–	cnvd
Cvelist	CVE-2022-23144	23 Sep 202214:11	–	cvelist
EUVD	EUVD-2022-28235	3 Oct 202520:07	–	euvd
NVD	CVE-2022-23144	23 Sep 202215:15	–	nvd
osv_cve	CVE-2022-23144	23 Sep 202215:15	–	osv_cve
Prion	Improper access control	23 Sep 202215:15	–	prion
Positive Technologies	PT-2022-6467 · Zte · Zte Zxvstb	11 Jan 202200:00	–	ptsecurity

NVD

Vulners

Node

AND

zte zxa10_b76hv3_firmwareRange≤2.01.02.01

zte zxa10_b76hv3Match-

Node

AND

zte zxa10_b766v2_firmwareRange≤2.01.02.01

zte zxa10_b766v2Match-

Node

AND

zte zxa10_b800v2_firmwareRange≤2.01.02.01

zte zxa10_b800v2Match-

Node

AND

zte zxa10_b860av2.1_firmwareRange≤2.01.02.01

zte zxa10_b860av2.1Match-

Node

AND

zte zxa10_b860h_firmwareRange≤2.01.02.01

zte zxa10_b860hMatch-

Node

AND

zte zxa10_b866v2-h_firmwareRange≤2.01.02.01

zte zxa10_b866v2-hMatch-

Node

AND

zte zxa10_b866v5-w10_firmwareRange≤2.01.02.01

zte zxa10_b866v5-w10Match-

Node

AND

zte zxa10_b960gv1_firmwareRange≤2.01.02.01

zte zxa10_b960gv1Match-

Node

AND

zte zxa10_b710c-a12_firmwareRange≤2.01.02.01

zte zxa10_b710c-a12Match-

Node

AND

zte zxa10_b710s2-a19_firmwareRange≤2.01.02.01

zte zxa10_b710s2-a19Match-

Node

AND

zte zxa10_b836ct-a15_firmwareRange≤2.01.02.01

zte zxa10_b836ct-a15Match-

Node

AND

zte zxa10_s100v_firmwareRange≤2.01.02.01

zte zxa10_s100vMatch-

Node

AND

zte zxa10_s200a_firmwareRange≤2.01.02.01

zte zxa10_s200aMatch-

Node

AND

zte zxa10_s200t_firmwareRange≤2.01.02.01

zte zxa10_s200tMatch-

Node

AND

zte zxa10_b700v7_firmwareRange≤2.01.02.01

zte zxa10_b700v7Match-

[
  {
    "product": "ZXvSTB",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All versions up to ZXvSTB-CAMSV2.01.02.01"
      }
    ]
  }
]

Source	Link
support	www.support.zte.com.cn/support/news/LoopholeInfoDetail.aspx

17 Jun 2026 04:29Current

9Critical risk

Vulners AI Score9

CVSS 3.19.1

EPSS0.00791

SSVC