CVE-2024-22069 — Permission and Access Control Vulnerability in ZXV10 XT802/ET301

CVE-2024-22069

Permission and Access Control Vulnerability in ZXV10 XT802/ET301 PUBLISHED

Description (CNA)

There is a permission and access control vulnerability of ZTE's ZXV10 XT802/ET301 product.Attackers with common permissions can log in the terminal web and change the password of the administrator illegally by intercepting requests to change the passwords.

Affected (CNA)

Vendor / product	Versions
ZTE / ZXV10 XT802	affected All versions up to V2.24.10P1 before V2.24.10P1
ZTE / ZXV10 ET301	affected All versions up to V3.22.11P3 before V3.22.11P3

CWE

CWE-269

References

https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1036424

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.