What is CVE-2022-23141?

CVE-2022-23141 is a high-severity vulnerability in Zte Zxmp M721, classified under Insertion of Sensitive Information into Log File. CVSS score: 7.5/10. Published 2022-07-15.

How severe is CVE-2022-23141?

High severity. CVSS v3 base score is 7.5 out of 10.

Information disclosure in Zte Zxmp M721

CVE-2022-23141

ZXMP M721 has an information leak vulnerability. Since the serial port authentication on the ZBOOT interface is not effective although it is enabled, an attacker could use this vulnerability to log in to the device to obtain sensitive information.

EPSS: 0.007 (50.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Zte Zxmp_m721
Zte Zxmp_m721_firmware — versions commond21bootv100004_ls1045
N/a Zxmp M721 — versions COMMOND21BOOTV100004_LS1045

Weakness classification (CWE)

CWE-532 — Insertion of Sensitive Information into Log File

References

psirt@zte.com.cn (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2022-23141?: CVE-2022-23141 is a high-severity vulnerability in Zte Zxmp M721, classified under Insertion of Sensitive Information into Log File. CVSS score: 7.5/10. Published 2022-07-15.
How severe is CVE-2022-23141?: High severity. CVSS v3 base score is 7.5 out of 10.