Lucene search

[email protected]NVD:CVE-2022-39071

HistoryMay 30, 2023 - 11:15 p.m.

CVE-2022-39071

2023-05-3023:15:09

[email protected]

web.nvd.nist.gov

cve-2022-39071

unauthorized access

zte

mobile phones

malicious application

system configuration files

user installers

user permission

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

0.0004 Low

EPSS

Percentile

14.3%

JSON

There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could overwrite some system configuration files and user installers without user permission.

Affected configurations

NVD

Node

zteblade_a52_firmwareRange<m02

AND

zteblade_a52Match-

Node

zteblade_a51_firmwareRange<m07

AND

zteblade_a51Match-

Node

zteblade_a3_lite_firmwareRange<m09

AND

zteblade_a3_liteMatch-

Node

zteblade_a5_2020Match-

AND

zteblade_a5_2020_firmwareRange<m05

Node

zteblade_l210Match-

AND

zteblade_l210_firmwareRange<1.14

Node

zteblade_a7s_firmwareRange<2.2

AND

zteblade_a7sMatch-

Node

zteblade_a31_firmwareRange<m03

AND

zteblade_a31Match-

Node

zteblade_a31_plus_firmwareRange<m04

AND

zteblade_a31_plusMatch-

Node

zteblade_a5_2019_firmwareRange<m13

AND

zteblade_a5_2019Match-

Node

zteblade_a71_firmwareRange<2.4

AND

zteblade_a71Match-

Node

zteblade_a72_firmwareRange<11.0.3

AND

zteblade_a72Match-

Node

zteblade_v20_smartMatch-

AND

zteblade_v20_smart_firmwareRange<1.14

Node

zteblade_v30Match-

AND

zteblade_v30_firmwareRange<1.11

Node

zteblade_v30_vitaMatch-

AND

zteblade_v30_vita_firmwareRange<1.11

Node

ztev40_proMatch-

AND

ztev40_pro_firmwareRange<11.0.4_9046

Node

zteblade_v40_vitaMatch-

AND

zteblade_v40_vita_firmwareRange<11.0.2_8045

Node

zteaxon_40_ultraMatch-

AND

zteaxon_40_ultra_firmwareRange<1.0.0b26

References

support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1030664

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

0.0004 Low

EPSS

Percentile

14.3%

JSON

Related for NVD:CVE-2022-39071

prion1 cvelist1 cve1