CVE-2022-39066

There is a SQL injection vulnerability in ZTE MF286R

High · published November 22, 2022

CVSS v3.1

8.8

EPSS

27%

Percentile

98.0

In the wild

Unconfirmed

What it is

There is a SQL injection vulnerability in ZTE MF286R. Due to insufficient validation of the input parameters of the phonebook interface, an authenticated attacker could use the vulnerability to execute arbitrary SQL injection.

The record

Technical detail

CVSS v3.1: 8.8 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.26542 · 98.0th percentile
Published: 2022-11-22T00:00Z

EPSS history

Timeline

22 NOV 00:00Z
There is a SQL injection vulnerability in ZTE MF286R
cvelistv5