CVE-2024-22063CWE-1236

ZTE ZENIC ONE R58 product has a CSV injection vulnerability

High · published December 30, 2024

CVSS v3.1
7.6
EPSS
1%
Percentile
57.1
In the wild
Unconfirmed
What it is

The ZENIC ONE R58 products by ZTE Corporation have a command injection vulnerability. An authenticated attacker can exploit this vulnerability to tamper with messages, inject malicious code, and subsequently launch attacks on related devices.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00831 · 57.1th percentile
Weakness
CWE-1236 · Improper Neutralization of Formula Elements in a CSV File
Published
2024-12-30T09:30Z
EPSS history
Timeline
  • 30 DEC 09:30Z
    ZTE ZENIC ONE R58 product has a CSV injection vulnerability
    cvelistv5