Improper access control

2022-09-2315:15:00

PRIOn knowledge base

www.prio-n.com

access control

vulnerability

zte zxvstb

permission control

default application

system.

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.8%

JSON

There is a broken access control vulnerability in ZTE ZXvSTB product. Due to improper permission control, attackers could use this vulnerability to delete the default application type, which affects normal use of system.

CPENameOperatorVersion
zxa10_b700v7_firmwarele2.01.02.01
zxa10_b710c-a12_firmwarele2.01.02.01
zxa10_b710s2-a19_firmwarele2.01.02.01
zxa10_b766v2_firmwarele2.01.02.01
zxa10_b76hv3_firmwarele2.01.02.01
zxa10_b800v2_firmwarele2.01.02.01
zxa10_b836ct-a15_firmwarele2.01.02.01
zxa10_b860av2.1_firmwarele2.01.02.01
zxa10_b860h_firmwarele2.01.02.01
zxa10_b866v2-h_firmwarele2.01.02.01

Name	Operator	Version
zxa10_b700v7_firmware	le	2.01.02.01
zxa10_b710c-a12_firmware	le	2.01.02.01
zxa10_b710s2-a19_firmware	le	2.01.02.01
zxa10_b766v2_firmware	le	2.01.02.01
zxa10_b76hv3_firmware	le	2.01.02.01
zxa10_b800v2_firmware	le	2.01.02.01
zxa10_b836ct-a15_firmware	le	2.01.02.01
zxa10_b860av2.1_firmware	le	2.01.02.01
zxa10_b860h_firmware	le	2.01.02.01
zxa10_b866v2-h_firmware	le	2.01.02.01