CVE-2022-23138: High severity zte mf297d vulnerability
Published Jun 9, 2022
·Updated
ZTE's MF297D product has cryptographic issues vulnerability. Due to the use of weak random values, the security of the device is reduced, and it may face the risk of attack.
Affected Software
2 affected components
ZTE Mf297d Firmware=mf297d_nordic1_b05
ZTE MF297D
Event History
Jun 9, 2022
CVE Published
via MITRE·02:34 PM
Data Sourced
via MITRE·02:34 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this ZTE product vulnerability?
The vulnerability ID for this ZTE product vulnerability is CVE-2022-23138.
2
What is the severity level of CVE-2022-23138?
CVE-2022-23138 has a severity level of high with a value of 7.5.
3
What is the affected software for CVE-2022-23138?
The affected software for CVE-2022-23138 is ZTE's MF297D product firmware version mf297d_nordic1_b05.
4
What is the risk associated with CVE-2022-23138?
The risk associated with CVE-2022-23138 is reduced device security and potential vulnerability to attacks.
5
How can I fix the cryptographic issues vulnerability in ZTE's MF297D product?
To fix the cryptographic issues vulnerability in ZTE's MF297D product, update the firmware to version mf297d_nordic1_b06 or later.