PT-2022-15881 · Zte · Zte Otcp

Published 2022-12-05 · Updated 2025-04-23 · CVE-2022-23143

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions ZTE OTCP product (affected versions not specified)

Description The issue is related to improper permission settings, allowing an attacker with high permissions to maliciously delete and modify files.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2022-23143

Affected Products

Zte Otcp

References · 4

• https://osv.dev/vulnerability/CVE-2022-23143 · Vendor Advisory
• https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1026164 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23143 · Security Note
• https://t.me/cvenotify/119592 · Telegram Post