CVE-2022-39070
Summary
| CVE | CVE-2022-39070 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-11-22 17:15:00 UTC |
| Updated | 2022-11-28 19:29:00 UTC |
| Description | There is an access control vulnerability in some ZTE PON OLT products. Due to improper access control settings, remote attackers could use the vulnerability to log in to the device and execute any operation. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Zte | Zxa10 C300m | - | All | All | All |
| Operating System | Zte | Zxa10 C300m Firmware | All | All | All | All |
| Hardware | Zte | Zxa10 C350m | - | All | All | All |
| Operating System | Zte | Zxa10 C350m Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Bulletin Details | MISC | support.zte.com.cn | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.