CVE-2022-39070: Critical severity zte zxa10 c350m firmware vulnerability
There is an access control vulnerability in some ZTE PON OLT products. Due to improper access control settings, remote attackers could use the vulnerability to log in to the device and execute any operation.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-39070?
CVE-2022-39070 is an access control vulnerability in some ZTE PON OLT products.
How does CVE-2022-39070 impact ZTE PON OLT products?
CVE-2022-39070 allows remote attackers to log in to the device and execute any operation.
Which ZTE PON OLT products are affected by CVE-2022-39070?
ZTE ZXA10 C350m Firmware versions up to 2.1.0xgp002.4 and ZTE ZXA10 C300m Firmware versions up to 2.1.0xgp002.4 are affected by CVE-2022-39070.
How severe is CVE-2022-39070?
CVE-2022-39070 has a severity rating of 9.8 (Critical).
Is ZTE ZXA10 C350m and ZXA10 C300m hardware affected by CVE-2022-39070?
ZTE ZXA10 C350m and ZXE10 C300m hardware is not vulnerable to CVE-2022-39070.
Where can I find more information about CVE-2022-39070?
You can find more information about CVE-2022-39070 at the following link: https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1027824