VULNERABILITY INTELLIGENCE

CVE-2022-23144

CVSS score9.1 CRITICAL
EPSS probability0.79%
CISA KEVNot currently listed
Published2022-09-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Description

There is a broken access control vulnerability in ZTE ZXvSTB product. Due to improper permission control, attackers could use this vulnerability to delete the default application type, which affects normal use of system.

Weakness classification

  • nvd@nist.gov: NVD-CWE-Other

Primary references