CVE-2022-23144

2022-09-2314:11:59

zte

www.cve.org

cve-2022-23144

broken access control

zte zxvstb

permission control

default application.

9.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.8%

JSON

There is a broken access control vulnerability in ZTE ZXvSTB product. Due to improper permission control, attackers could use this vulnerability to delete the default application type, which affects normal use of system.

CNA Affected

[
  {
    "product": "ZXvSTB",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All versions up to ZXvSTB-CAMSV2.01.02.01"
      }
    ]
  }
]

References

support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1026224