CVSS 3.1
9.1 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:HCVE-2022-23144
Critical (9.1) in zte. EPSS 0.8% chance of exploitation in the next 30 days.
There is a broken access control vulnerability in ZTE ZXvSTB product. Due to improper permission control, attackers could use this vulnerability to delete the default application type, which affects normal use of system.
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- zte:zxa10_b700v7_firmware
- zte:zxa10_b710c-a12_firmware
- zte:zxa10_b710s2-a19_firmware
- zte:zxa10_b766v2_firmware
- zte:zxa10_b76hv3_firmware
- zte:zxa10_b800v2_firmware
- zte:zxa10_b836ct-a15_firmware
- zte:zxa10_b860av2.1_firmware
- zte:zxa10_b860h_firmware
- zte:zxa10_b866v2-h_firmware
- zte:zxa10_b866v5-w10_firmware
- zte:zxa10_b960gv1_firmware
- zte:zxa10_s100v_firmware
- zte:zxa10_s200a_firmware
- zte:zxa10_s200t_firmware