PT-2022-24712 · Zte · Zte Pon Olt

Published 2022-11-22 · Updated 2025-04-29 · CVE-2022-39070

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ZTE PON OLT products (affected versions not specified)

Description The issue is related to improper access control settings in ZTE PON OLT products, allowing remote attackers to log in to the device and execute any operation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2022-39070

Affected Products

Zte Pon Olt

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2022-39070 · Security Note
• https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1027824 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-39070 · Vendor Advisory
• https://t.me/cvenotify/120140 · Telegram Post
• https://t.me/cibsecurity/53365 · Telegram Post
• https://t.me/cvenotify/38253 · Telegram Post
• https://t.me/cvenotify/38240 · Telegram Post