CVE-2024-22063

9.0 criticalEPSS 0.8%

Critical (9.0) in zte zenic one r58. EPSS 0.8% chance of exploitation in the next 30 days.

The ZENIC ONE R58 products by ZTE Corporation have a command injection vulnerability. An authenticated attacker can exploit this vulnerability to tamper with messages, inject malicious code, and subsequently launch attacks on related devices.

Severity

CVSS 3.1

9.0 critical

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE: CWE-1236
Published: 2024-12-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zte:zenic_one_r58

References

https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/4522216612187627521

Check your stack JSON