CVE-2022-39066

n/a / MF286R PUBLISHED

Description (CNA)

There is a SQL injection vulnerability in ZTE MF286R. Due to insufficient validation of the input parameters of the phonebook interface, an authenticated attacker could use the vulnerability to execute arbitrary SQL injection.

Affected (CNA)

Vendor / product	Versions
n/a / MF286R	affected Nordic_MF286R_B06

CWE

No CWE identifiers supplied.

References

https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1027744

ADP enrichment

CVE

No English description supplied.

https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1027744

CISA-ADP

No English description supplied.

No references supplied.