CVE-2022-23144

Published: Sep 23, 2022Modified: Jun 17, 2026

9.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Exploitability: 3.9 / Impact: 5.2

Source: NVD

Description

There is a broken access control vulnerability in ZTE ZXvSTB product. Due to improper permission control, attackers could use this vulnerability to delete the default application type, which affects normal use of system.

Affected (15)

Products: Zte: Zxa10 B76hv3 Firmware, Zxa10 B766v2 Firmware, Zxa10 B800v2 Firmware, Zxa10 B860av2.1 Firmware, Zxa10 B860h Firmware, Zxa10 B866v2 H Firmware, Zxa10 B866v5 W10 Firmware, Zxa10 B960gv1 Firmware, Zxa10 B710c A12 Firmware, Zxa10 B710s2 A19 Firmware, Zxa10 B836ct A15 Firmware, Zxa10 S100v Firmware, Zxa10 S200a Firmware, Zxa10 S200t Firmware, Zxa10 B700v7 Firmware

Zte

15 products

Zxa10 B76hv3 Firmware

Zxa10 B766v2 Firmware

Zxa10 B800v2 Firmware

Zxa10 B860av2.1 Firmware

Zxa10 B860h Firmware

Zxa10 B866v2 H Firmware

Zxa10 B866v5 W10 Firmware

Zxa10 B960gv1 Firmware

Zxa10 B710c A12 Firmware

Zxa10 B710s2 A19 Firmware

Zxa10 B836ct A15 Firmware

Zxa10 S100v Firmware

Zxa10 S200a Firmware

Zxa10 S200t Firmware

Zxa10 B700v7 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zte Zxa10 B76hv3 Firmware	Up to 2.01.02.01

Running on/with	Platform Versions
Zte Zxa10 B76hv3	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zte Zxa10 B766v2 Firmware	Up to 2.01.02.01

Running on/with	Platform Versions
Zte Zxa10 B766v2	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zte Zxa10 B800v2 Firmware	Up to 2.01.02.01

Running on/with	Platform Versions
Zte Zxa10 B800v2	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zte Zxa10 B860av2.1 Firmware	Up to 2.01.02.01

Running on/with	Platform Versions
Zte Zxa10 B860av2.1	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zte Zxa10 B860h Firmware	Up to 2.01.02.01

Running on/with	Platform Versions
Zte Zxa10 B860h	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zte Zxa10 B866v2 H Firmware	Up to 2.01.02.01

Running on/with	Platform Versions
Zte Zxa10 B866v2 H	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zte Zxa10 B866v5 W10 Firmware	Up to 2.01.02.01

Running on/with	Platform Versions
Zte Zxa10 B866v5 W10	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zte Zxa10 B960gv1 Firmware	Up to 2.01.02.01

Running on/with	Platform Versions
Zte Zxa10 B960gv1	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zte Zxa10 B710c A12 Firmware	Up to 2.01.02.01

Running on/with	Platform Versions
Zte Zxa10 B710c A12	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zte Zxa10 B710s2 A19 Firmware	Up to 2.01.02.01

Running on/with	Platform Versions
Zte Zxa10 B710s2 A19	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zte Zxa10 B836ct A15 Firmware	Up to 2.01.02.01

Running on/with	Platform Versions
Zte Zxa10 B836ct A15	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zte Zxa10 S100v Firmware	Up to 2.01.02.01

Running on/with	Platform Versions
Zte Zxa10 S100v	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zte Zxa10 S200a Firmware	Up to 2.01.02.01

Running on/with	Platform Versions
Zte Zxa10 S200a	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zte Zxa10 S200t Firmware	Up to 2.01.02.01

Running on/with	Platform Versions
Zte Zxa10 S200t	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zte Zxa10 B700v7 Firmware	Up to 2.01.02.01

Running on/with	Platform Versions
Zte Zxa10 B700v7	All versions

References (2)

https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1026224

Source: psirt@zte.com.cn

Vendor Advisory

https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1026224

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.