PT-2023-13634 · Zte+1 · Zte+1

Published

2023-06-16

·

Updated

2026-03-12

·

CVE-2022-38694

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions ZTE versions (affected versions not specified) Vivo versions (affected versions not specified)
Description The issue concerns the locking of bootloaders by certain brands, with ZTE and Vivo being examples. ZTE has started blocking the vulnerability by removing the unlock message on splloader. Vivo blocks root at the kernel level. There is an effort to investigate the firmware, and a backup has been made using spd dump. The goal is to utilize the issue to unlock the bootloader and make Unisoc download mode easily accessible.
Recommendations For ZTE versions, consider disabling the splloader until a patch is available. For Vivo versions, restrict access to the kernel level to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

LPE

Weakness Enumeration

CWE-250

Related Identifiers

CVE-2022-38694

Affected Products

Vivo
Zte