CVE-2022-39070

There is an access control vulnerability in some ZTE PON OLT products

Critical · published November 22, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
58.8
In the wild
Unconfirmed
What it is

🚨 An access control loophole means remote attackers could waltz right in and take control of your ZTE PON OLT device! 🔥 Think of it as a hotel with no front desk security—anyone can walk in, grab a key, and start using the rooms, no questions asked! This could lead to an attacker executing any operation on the device, which is absolutely devastating for network security. Imagine a malicious insider having the keys to your entire operation, compromising data and services without any effort!

Put simply

Think of it as a hotel with no front desk security—anyone can walk in, grab a key, and start using the rooms, no questions asked! The vulnerability arises from improper access control settings, allowing remote attackers to log in without proper authentication and perform unauthorized actions on the device.

What to do

This could lead to an attacker executing any operation on the device, which is absolutely devastating for network security. Imagine a malicious insider having the keys to your entire operation, compromising data and services without any effort! To secure your system, immediately review and update the access control settings on your ZTE PON OLT products. If available, apply the latest firmware updates from ZTE, and consider implementing additional network security measures like firewalls or intrusion detection systems. 🛡️ You've got this! With swift action, you'll secure your devices and become a security hero! 💪🚀

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00883 · 58.8th percentile
Published
2022-11-22T00:00Z
EPSS history
Timeline
  • 22 NOV 00:00Z
    There is an access control vulnerability in some ZTE PON OLT products
    cvelistv5