CVE-2024-22068CWE-269

Weak Password Vulnerability in ZTE ZSR V2 Intelligent Multi Service Router

Medium · published October 10, 2024

CVSS v3.1
6.0
EPSS
0%
Percentile
14.3
In the wild
Unconfirmed
What it is

Improper Privilege Management vulnerability in ZTE ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series on 64 bit allows Functionality Bypass.This issue affects ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series: V4.00.10 and earlier.

The record
Technical detail
CVSS v3.1
6.0 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00240 · 14.3th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2024-10-10T08:51Z
EPSS history
Timeline
  • 10 OCT 08:51Z
    Weak Password Vulnerability in ZTE ZSR V2 Intelligent Multi Service Router
    cvelistv5