CVE-2022-23144

🗓️ 23 Sep 2022 14:11:59Reported by zteType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 39 Views

There's a broken access control vulnerability in ZTE ZXvSTB product, allowing attackers to delete the default application type

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-23144	23 Sep 202218:19	–	circl
CNNVD	ZTE ZXvSTB 安全漏洞	23 Sep 202200:00	–	cnnvd
CNVD	ZTE ZXvSTB License Issue Vulnerability	28 Sep 202200:00	–	cnvd
Cvelist	CVE-2022-23144	23 Sep 202214:11	–	cvelist
EUVD	EUVD-2022-28235	3 Oct 202520:07	–	euvd
NVD	CVE-2022-23144	23 Sep 202215:15	–	nvd
OSV	CVE-2022-23144	23 Sep 202215:15	–	osv
Prion	Improper access control	23 Sep 202215:15	–	prion
Positive Technologies	PT-2022-6467 · Zte · Zte Zxvstb	11 Jan 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-23144	22 May 202523:52	–	redhatcve

NVD

Node

zte zxa10_b76hv3_firmwareRange≤2.01.02.01

AND

zte zxa10_b76hv3Match-

Node

zte zxa10_b766v2_firmwareRange≤2.01.02.01

AND

zte zxa10_b766v2Match-

Node

zte zxa10_b800v2_firmwareRange≤2.01.02.01

AND

zte zxa10_b800v2Match-

Node

zte zxa10_b860av2.1_firmwareRange≤2.01.02.01

AND

zte zxa10_b860av2.1Match-

Node

zte zxa10_b860h_firmwareRange≤2.01.02.01

AND

zte zxa10_b860hMatch-

Node

zte zxa10_b866v2-h_firmwareRange≤2.01.02.01

AND

zte zxa10_b866v2-hMatch-

Node

zte zxa10_b866v5-w10_firmwareRange≤2.01.02.01

AND

zte zxa10_b866v5-w10Match-

Node

zte zxa10_b960gv1_firmwareRange≤2.01.02.01

AND

zte zxa10_b960gv1Match-

Node

zte zxa10_b710c-a12_firmwareRange≤2.01.02.01

AND

zte zxa10_b710c-a12Match-

Node

zte zxa10_b710s2-a19_firmwareRange≤2.01.02.01

AND

zte zxa10_b710s2-a19Match-

Node

zte zxa10_b836ct-a15_firmwareRange≤2.01.02.01

AND

zte zxa10_b836ct-a15Match-

Node

zte zxa10_s100v_firmwareRange≤2.01.02.01

AND

zte zxa10_s100vMatch-

Node

zte zxa10_s200a_firmwareRange≤2.01.02.01

AND

zte zxa10_s200aMatch-

Node

zte zxa10_s200t_firmwareRange≤2.01.02.01

AND

zte zxa10_s200tMatch-

Node

zte zxa10_b700v7_firmwareRange≤2.01.02.01

AND

zte zxa10_b700v7Match-

[
  {
    "product": "ZXvSTB",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All versions up to ZXvSTB-CAMSV2.01.02.01"
      }
    ]
  }
]

Source	Link
support	www.support.zte.com.cn/support/news/LoopholeInfoDetail.aspx

22 May 2025 19:15Current

9High risk

Vulners AI Score9

CVSS 3.19.1

EPSS0.00389

SSVC