Auth bypass in ZTE Zxmp M721
CVE-2022-23139
ZTE's ZXMP M721 product has a permission and access control vulnerability. Since the folder permission viewed by sftp is 666, which is inconsistent with the actual permission. It’s easy for?users to?ignore the modification?of?the file permission configuration, so that low-authority accounts could actually obtain higher operating permissions on key files.
Vulnerability class: Broken Access Control
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.008 (53.7th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 54th percentile — 53.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.007 · newest: 0.008 · change: +0.000
Affected products
- ZTE Zxmp M721
- ZTE Zxmp M721 Firmware — versions 5.10.030.006
- Zxmp M721 — versions V5.10.030.006
Weakness classification (CWE)
Public proof-of-concept exploits
References
- support.zte.com.cn/support/news/LoopholeInfoDetail.aspx (Vendor Advisory)
Frequently asked questions
- What is CVE-2022-23139?
- CVE-2022-23139 is a high-severity vulnerability in ZTE Zxmp M721, classified under Incorrect Authorization. CVSS score: 8.8/10. Published 2022-05-12.
- How severe is CVE-2022-23139?
- High severity. CVSS v3 base score is 8.8 out of 10.
- Is CVE-2022-23139 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.