CVE-2022-23139

ZTE's ZXMP M721 product has a permission and access control vulnerability

published May 12, 2022

CVSS
—
EPSS
1%
Percentile
55.4
In the wild
Unconfirmed
What it is

ZTE's ZXMP M721 product has a permission and access control vulnerability. Since the folder permission viewed by sftp is 666, which is inconsistent with the actual permission. It’s easy for?users to?ignore the modification?of?the file permission configuration, so that low-authority accounts could actually obtain higher operating permissions on key files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00779 · 55.4th percentile
Published
2022-05-12T19:26Z
EPSS history
Timeline
  • 12 MAY 19:26Z
    ZTE's ZXMP M721 product has a permission and access control vulnerability
    cvelistv5