CVE-2022-23144

n/a / ZXvSTB PUBLISHED

Description (CNA)

There is a broken access control vulnerability in ZTE ZXvSTB product. Due to improper permission control, attackers could use this vulnerability to delete the default application type, which affects normal use of system.

Affected (CNA)

Vendor / product	Versions
n/a / ZXvSTB	affected All versions up to ZXvSTB-CAMSV2.01.02.01

CWE

No CWE identifiers supplied.

References

https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1026224

ADP enrichment

CVE

No English description supplied.

https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1026224

CISA-ADP

No English description supplied.

No references supplied.