CVE-2022-23143

2022-12-0500:00:00

zte

www.cve.org

zte otcp

permission settings

access control

vulnerability

attacker

file modification

0.001 Low

EPSS

Percentile

29.8%

JSON

ZTE OTCP product is impacted by a permission and access control vulnerability. Due to improper permission settings, an attacker with high permissions could use this vulnerability to maliciously delete and modify files.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "OTCP",
    "versions": [
      {
        "version": "V2.21.40.06RC1",
        "status": "affected"
      }
    ]
  }
]

References

support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1026164

0.001 Low

EPSS

Percentile

29.8%

JSON

Related for CVELIST:CVE-2022-23143