What is CVE-2022-23144?

CVE-2022-23144 is a critical-severity vulnerability in Zte Zxa10 B700v7. CVSS score: 9.1/10. Published 2022-09-23.

How severe is CVE-2022-23144?

Critical severity. CVSS v3 base score is 9.1 out of 10.

Vulnerability in Zte Zxa10 B700v7

CVE-2022-23144

There is a broken access control vulnerability in ZTE ZXvSTB product. Due to improper permission control, attackers could use this vulnerability to delete the default application type, which affects normal use of system.

EPSS: 0.007 (49.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H.

Affected products

Zte Zxa10_b700v7
Zte Zxa10_b700v7_firmware
Zte Zxa10_b710c-a12
Zte Zxa10_b710c-a12_firmware
Zte Zxa10_b710s2-a19
Zte Zxa10_b710s2-a19_firmware
Zte Zxa10_b766v2
Zte Zxa10_b766v2_firmware
Zte Zxa10_b76hv3
Zte Zxa10_b76hv3_firmware

References

psirt@zte.com.cn (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2022-23144?: CVE-2022-23144 is a critical-severity vulnerability in Zte Zxa10 B700v7. CVSS score: 9.1/10. Published 2022-09-23.
How severe is CVE-2022-23144?: Critical severity. CVSS v3 base score is 9.1 out of 10.