CVE-2024-22069: Permission and Access Control Vulnerability in ZXV10 XT802/ET301
First published: Thu Aug 08 2024(Updated: )
There is a permission and access control vulnerability of ZTE's ZXV10 XT802/ET301 product.Attackers with common permissions can log in the terminal web and change the password of the administrator illegally by intercepting requests to change the passwords.
Credit: psirt@zte.com.cn
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Zte Zxv10 Et301 Firmware | <v3.22.11p3 | |
| Zte Zxv10 Et301 | ||
| All of | ||
| Zte Zxv10 Xt802 Firmware | <v2.24.10p1 | |
| Zte Zxv10 Xt802 |
Remedy
ZXV10 XT802:V2.24.10P1 ZXV10 ET301:V3.22.11P3
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
- agent/author
- agent/weakness
- agent/references
- agent/type
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/title
- agent/first-publish-date
- agent/severity
- agent/last-modified-date
- agent/softwarecombine
- agent/event
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/zte
- canonical/zte zxv10 et301 firmware
- canonical/zte zxv10 et301
- canonical/zte zxv10 xt802 firmware
- canonical/zte zxv10 xt802