CVE-2024-22069CWE-269

Permission and Access Control Vulnerability in ZXV10 XT802/ET301

High · published August 8, 2024

CVSS v3.1
7.1
EPSS
0%
Percentile
17.1
In the wild
Unconfirmed
What it is

There is a permission and access control vulnerability of ZTE's ZXV10 XT802/ET301 product.Attackers with common permissions can log in the terminal web and change the password of the administrator illegally by intercepting requests to change the passwords.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00262 · 17.1th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2024-08-08T07:54Z
EPSS history
Timeline
  • 08 AUG 07:54Z
    Permission and Access Control Vulnerability in ZXV10 XT802/ET301
    cvelistv5