CVE-2024-22069

8.8 highEPSS 0.3%

High (8.8) in zte. EPSS 0.3% chance of exploitation in the next 30 days.

There is a permission and access control vulnerability of ZTE's ZXV10 XT802/ET301 product.Attackers with common permissions can log in the terminal web and change the password of the administrator illegally by intercepting requests to change the passwords.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 18% of CVEs (scores of 2026-10-31)
CWE: CWE-269
Published: 2024-08-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zte:zxv10_et301_firmware
zte:zxv10_xt802_firmware

References

https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1036424

Check your stack JSON