CVE-2024-22068
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Summary
CVE-2024-22068 is a newly disclosed privilege management vulnerability that impacts ZTE's ZXR10 1800-2S series, ZXR10 2800-4, ZXR10 3800-8, and ZXR10 160 series on 64-bit platforms. The flaw, which affects versions V4.00.10 and earlier, enables Functionality Bypass, allowing unauthorized access to restricted features. This vulnerability could potentially be exploited by attackers to gain elevated access or control over the affected devices, posing a significant risk to organizations using these ZTE products. It is recommended that users of the impacted ZTE models update their software as soon as possible to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- ZTE Corporation