CVE-2024-22063 | THREATINT

Description

The ZENIC ONE R58 products by ZTE Corporation have a command injection vulnerability. An authenticated attacker can exploit this vulnerability to tamper with messages, inject malicious code, and subsequently launch attacks on related devices.

Reserved 2024-01-05 | Published 2024-12-30 | Updated 2024-12-30 | Assigner zte

HIGH: 7.6CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

Problem types

CWE-1236

Product status

Default status

unaffected

Any version

affected

References

support.zte.com.cn/...ui/bulletin/detail/4522216612187627521

cve.org (CVE-2024-22063)

nvd.nist.gov (CVE-2024-22063)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase

Subscribe to our newsletter to learn more about our work.