PT-2024-19177 · Zte · Zenic One R58

Published 2024-12-30 · Updated 2025-01-28 · CVE-2024-22063

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Critical

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ZENIC ONE R58 (affected versions not specified)

Description The ZENIC ONE R58 products by ZTE Corporation have a command injection vulnerability. An authenticated attacker can exploit this vulnerability to tamper with messages, inject malicious code, and subsequently launch attacks on related devices.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-1236

Related Identifiers

CVE-2024-22063

Affected Products

Zenic One R58

References · 11

• https://osv.dev/vulnerability/CVE-2024-22063 · Vendor Advisory
• https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/4522216612187627521 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-22063 · Security Note
• https://t.me/cvenotify/105739 · Telegram Post
• https://t.me/cvenotify/108889 · Telegram Post
• https://twitter.com/cracbot/status/1875421955006066801 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1873707114494886327 · Twitter Post
• https://t.me/latest_high_impact_cve/1728 · Telegram Post
• https://t.me/cvedetector/13930 · Telegram Post
• https://twitter.com/cracbot/status/1875059576103674302 · Twitter Post
• https://twitter.com/CVEnew/status/1873665586397397280 · Twitter Post