CVE-2024-22066
First published: Tue Oct 29 2024(Updated: )
There is a privilege escalation vulnerability in ZTE ZXR10 ZSR V2 intelligent multi service router . An authenticated attacker could use the vulnerability to obtain sensitive information about the device.
Credit: psirt@zte.com.cn
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Zte Zxr10 1800-2s Firmware | <=3.00.40 | |
| ZTE ZXR10 1800-2S | ||
| All of | ||
| Zte Zxr10 2800-4 Firmware | <=3.00.40 | |
| Zte Zxr10 2800-4 | ||
| All of | ||
| Zte Zxr10 3800-8 Firmware | <=3.00.40 | |
| Zte Zxr10 3800-8 | ||
| All of | ||
| Zte Zxr10 160 Firmware | <=3.00.40 | |
| Zte Zxr10 160 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-22066?
CVE-2024-22066 is classified as a privilege escalation vulnerability that could allow an authenticated attacker to access sensitive device information.
How do I fix CVE-2024-22066?
To remediate CVE-2024-22066, update the firmware of the affected ZTE ZXR10 models to versions higher than 3.00.40.
What devices are affected by CVE-2024-22066?
CVE-2024-22066 affects ZTE ZXR10 models including 1800-2s, 2800-4, 3800-8, and 160 with firmware version 3.00.40 or lower.
Can an unauthenticated user exploit CVE-2024-22066?
No, CVE-2024-22066 requires an authenticated user to exploit the privilege escalation vulnerability.
What information can be exposed due to CVE-2024-22066?
CVE-2024-22066 can potentially expose sensitive information related to the device configuration and operation.
- agent/weakness
- agent/references
- agent/type
- agent/first-publish-date
- agent/description
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/tags
- agent/softwarecombine
- agent/source
- vendor/zte
- canonical/zte zxr10 1800-2s firmware
- version/zte zxr10 1800-2s firmware/3.00.40
- canonical/zte zxr10 1800-2s
- canonical/zte zxr10 2800-4 firmware
- version/zte zxr10 2800-4 firmware/3.00.40
- canonical/zte zxr10 2800-4
- canonical/zte zxr10 3800-8 firmware
- version/zte zxr10 3800-8 firmware/3.00.40
- canonical/zte zxr10 3800-8
- canonical/zte zxr10 160 firmware
- version/zte zxr10 160 firmware/3.00.40
- canonical/zte zxr10 160