CVE-2024-22063: ZTE ZENIC ONE R58 product has a CSV injection vulnerability
The ZENIC ONE R58 products by ZTE Corporation have a command injection vulnerability. An authenticated attacker can exploit this vulnerability to tamper with messages, inject malicious code, and subsequently launch attacks on related devices.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-22063?
CVE-2024-22063 is categorized as a serious command injection vulnerability that can lead to significant security risks for affected devices.
How do I fix CVE-2024-22063?
To mitigate CVE-2024-22063, users should update their ZTE Zenic One R58 devices to the latest firmware version that addresses the vulnerability.
Who is affected by CVE-2024-22063?
The vulnerability affects authenticated users of the ZTE Zenic One R58 products with firmware versions up to 16.24.40.
What impact can CVE-2024-22063 have on my network?
Exploitation of CVE-2024-22063 can allow attackers to tamper with messages and inject malicious code, potentially compromising the security of related devices.
Is authentication required to exploit CVE-2024-22063?
Yes, CVE-2024-22063 requires an authenticated attacker to exploit the vulnerability.