PT-2024-19181 · Zte · Zte Nh8091

Published 2024-11-18 · Updated 2024-11-20 · CVE-2024-22067

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ZTE NH8091 product (affected versions not specified)

Description The ZTE NH8091 product has an improper permission control issue. This issue affects the Web module interface, allowing an authenticated attacker to potentially execute arbitrary commands.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2024-22067

Affected Products

Zte Nh8091

References · 7

• https://osv.dev/vulnerability/CVE-2024-22067 · Vendor Advisory
• https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/6179526095692935173 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-22067 · Security Note
• https://t.me/cvedetector/11292 · Telegram Post
• https://t.me/cvenotify/101965 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1858537229204721917 · Twitter Post
• https://twitter.com/CVEnew/status/1858409200260628878 · Twitter Post