CVE-2024-22062CWE-346

Permissions and Access Control Vulnerability in ZTE ZXCLOUD IRAI

Medium · published July 9, 2024

CVSS v3.1
6.3
EPSS
0%
Percentile
5.4
In the wild
Unconfirmed
What it is

There is a permissions and access control vulnerability in ZXCLOUD IRAI.An attacker can elevate non-administrator permissions to administrator permissions by modifying the configuration.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00165 · 5.4th percentile
Weakness
CWE-346 · Origin Validation Error
Published
2024-07-09T06:41Z
EPSS history
Timeline
  • 09 JUL 06:41Z
    Permissions and Access Control Vulnerability in ZTE ZXCLOUD IRAI
    cvelistv5