CVE-2024-22066: High severity zte zxr10 1800-2s firmware vulnerability
There is a privilege escalation vulnerability in ZTE ZXR10 ZSR V2 intelligent multi service router . An authenticated attacker could use the vulnerability to obtain sensitive information about the device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-22066?
CVE-2024-22066 is classified as a privilege escalation vulnerability that could allow an authenticated attacker to access sensitive device information.
How do I fix CVE-2024-22066?
To remediate CVE-2024-22066, update the firmware of the affected ZTE ZXR10 models to versions higher than 3.00.40.
What devices are affected by CVE-2024-22066?
CVE-2024-22066 affects ZTE ZXR10 models including 1800-2s, 2800-4, 3800-8, and 160 with firmware version 3.00.40 or lower.
Can an unauthenticated user exploit CVE-2024-22066?
No, CVE-2024-22066 requires an authenticated user to exploit the privilege escalation vulnerability.
What information can be exposed due to CVE-2024-22066?
CVE-2024-22066 can potentially expose sensitive information related to the device configuration and operation.