CVE-2022-39072 — n/a / MF286R,MF289D

Description (CNA)

There is a SQL injection vulnerability in Some ZTE Mobile Internet products. Due to insufficient validation of the input parameters of the SNTP interface, an authenticated attacker could use the vulnerability to execute stored XSS attacks.

Affected (CNA)

Vendor / product	Versions
n/a / MF286R,MF289D	affected Nordic_MF286R_B06, CR_TMOCZMF289DV1.0.0B07

CWE

No CWE identifiers supplied.

References

https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1028624

ADP enrichment

CVE

No English description supplied.

https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1028624

CISA-ADP

No English description supplied.

No references supplied.