Lucene search
HistorySep 18, 2024 - 2:15 a.m.
CVE-2022-39068
buffer overflow
zte mf296r
sms parameter
denial of service
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0
Percentile
14.1%
There is a buffer overflow vulnerability in ZTE MF296R. Due to insufficient validation of the SMS parameter length, an authenticated attacker could use the vulnerability to perform a denial of service attack.
Affected configurations
Node
ztemf296r_firmwareMatchmf296r_nordic1_b06
ztemf296rMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| zte | mf296r_firmware | mf296r_nordic1_b06 | cpe:2.3:o:zte:mf296r_firmware:mf296r_nordic1_b06:*:*:*:*:*:*:* |
| zte | mf296r | - | cpe:2.3:h:zte:mf296r:-:*:*:*:*:*:*:* |
Related
vulnrichment
vulnrichment
CVE-2022-39068 Buffer Overflow Vulnerability in ZTE MF296R
2024-09-18 01:57:54
cvelist
cvelist
CVE-2022-39068 Buffer Overflow Vulnerability in ZTE MF296R
2024-09-18 01:57:54
cve
cve
CVE-2022-39068
2024-09-18 02:15:09
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0
Percentile
14.1%
Related for NVD:CVE-2022-39068