What is the severity of CVE-2024-22069?

CVE-2024-22069 is considered a critical vulnerability due to its potential to allow unauthorized access and administrative control.

How do I fix CVE-2024-22069?

To mitigate CVE-2024-22069, update to the latest firmware versions: ZXV10 XT802 firmware version 2.24.10p1 or ZXV10 ET301 firmware version 3.22.11p3.

Who is affected by CVE-2024-22069?

CVE-2024-22069 affects users of ZTE's ZXV10 XT802 and ZXV10 ET301 products running specified vulnerable firmware versions.

What is the root cause of CVE-2024-22069?

The root cause of CVE-2024-22069 is inadequate permission and access control, allowing regular users to change administrator passwords.

Can attackers exploit CVE-2024-22069 remotely?

Yes, attackers can exploit CVE-2024-22069 remotely by intercepting requests to change passwords on the terminal web interface.

Vulnerability/
CVE-2024-22069

high

8.8

CWE

269

8/8/2024

20/8/2024

CVE-2024-22069: Permission and Access Control Vulnerability in ZXV10 XT802/ET301

First published: Thu Aug 08 2024(Updated: )

There is a permission and access control vulnerability of ZTE's ZXV10 XT802/ET301 product.Attackers with common permissions can log in the terminal web and change the password of the administrator illegally by intercepting requests to change the passwords.

Credit: psirt@zte.com.cn

Affected Software	Affected Version	How to fix
All of
ZTE ZXV10 ET301 Firmware	<v3.22.11p3
ZTE ZXV10 ET301 Firmware
All of
ZTE ZXV10 XT802	<v2.24.10p1
ZTE ZXV10 Xt802 Firmware

Remedy

ZXV10 XT802:V2.24.10P1 ZXV10 ET301:V3.22.11P3

Never miss a vulnerability like this again

Reference Links

https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1036424

Frequently Asked Questions

What is the severity of CVE-2024-22069?
CVE-2024-22069 is considered a critical vulnerability due to its potential to allow unauthorized access and administrative control.
How do I fix CVE-2024-22069?
To mitigate CVE-2024-22069, update to the latest firmware versions: ZXV10 XT802 firmware version 2.24.10p1 or ZXV10 ET301 firmware version 3.22.11p3.
Who is affected by CVE-2024-22069?
CVE-2024-22069 affects users of ZTE's ZXV10 XT802 and ZXV10 ET301 products running specified vulnerable firmware versions.
What is the root cause of CVE-2024-22069?
The root cause of CVE-2024-22069 is inadequate permission and access control, allowing regular users to change administrator passwords.
Can attackers exploit CVE-2024-22069 remotely?
Yes, attackers can exploit CVE-2024-22069 remotely by intercepting requests to change passwords on the terminal web interface.

agent/author
agent/weakness
agent/references
agent/type
agent/description
collector/mitre-cve
source/MITRE
agent/remedy
agent/title
agent/first-publish-date
agent/severity
agent/last-modified-date
agent/event
agent/softwarecombine
agent/source
agent/tags
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/software-canonical-lookup-request
vendor/zte
canonical/zte zxv10 et301 firmware
canonical/zte zxv10 xt802 firmware
canonical/zte zxv10 xt802

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.