Lucene search

K
nvd[email protected]NVD:CVE-2024-22064
HistoryMay 14, 2024 - 2:56 p.m.

CVE-2024-22064

2024-05-1414:56:40
CWE-1051
web.nvd.nist.gov
1
zte
zxun-epdg
cryptographic keys
security risk
user session

CVSS3

8.3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

AI Score

8.3

Confidence

High

EPSS

0

Percentile

9.0%

ZTE ZXUN-ePDG product, which serves as the network node of the VoWifi system, under by default configuration, uses a set of non-unique cryptographic keys during establishing a secure connection(IKE) with the mobile devices connecting over the internet . If the set of keys are leaked or cracked, the user session informations using the keys may be leaked.

CVSS3

8.3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

AI Score

8.3

Confidence

High

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2024-22064