CVE-2024-22065 — ZTE MF258 Pro product has a OS Command injection vulnerability

CVE-2024-22065

ZTE MF258 Pro product has a OS Command injection vulnerability PUBLISHED

Description (CNA)

There is a command injection vulnerability in ZTE MF258 Pro product. Due to insufficient validation of Ping Diagnosis interface parameter, an authenticated attacker could use the vulnerability to execute arbitrary commands.

Affected (CNA)

Vendor / product	Versions
ZTE / MF258 Pro	affected ZTE_MF258PRO_STD_V1.0.0B03

CWE

CWE-20

References

https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/1171513586716225572

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.