CVE-2024-22068 — Weak Password Vulnerability in ZTE ZSR V2 Intelligent Multi Service Router

CVE-2024-22068

Weak Password Vulnerability in ZTE ZSR V2 Intelligent Multi Service Router PUBLISHED

Description (CNA)

Improper Privilege Management vulnerability in ZTE ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series on 64 bit allows Functionality Bypass.This issue affects ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series: V4.00.10 and earlier.

Affected (CNA)

Vendor / product	Versions
ZTE / ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series	affected V4.00.10 and earlier

CWE

CWE-269

References

https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/5359853646778130472

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.