CVE-2022-39074
3.3
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Exploitability: 1.8 / Impact: 1.4
Source: NVD
Description
There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could start a non-public interface of an application without user permission.
Affected (17)
Products: Zte: Blade A52 Firmware, Blade A51 Firmware, Blade A3 Lite Firmware, Blade A5 2020 Firmware, Blade L210 Firmware, Blade A7s Firmware, Blade A31 Firmware, Blade A31 Plus Firmware, Blade A5 2019 Firmware, Blade A71 Firmware, Blade A72 Firmware, Blade V20 Smart Firmware, Blade V30 Firmware, Blade V30 Vita Firmware, V40 Pro Firmware, Blade V40 Vita Firmware, Axon 40 Ultra Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before m02 |
| Running on/with | Platform Versions |
|---|---|
Zte Blade A52 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before m07 |
| Running on/with | Platform Versions |
|---|---|
Zte Blade A51 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before m09 |
| Running on/with | Platform Versions |
|---|---|
Zte Blade A3 Lite | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before m05 |
| Running on/with | Platform Versions |
|---|---|
Zte Blade A5 2020 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.14 |
| Running on/with | Platform Versions |
|---|---|
Zte Blade L210 | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.2 |
| Running on/with | Platform Versions |
|---|---|
Zte Blade A7s | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Before m03 |
| Running on/with | Platform Versions |
|---|---|
Zte Blade A31 | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Before m04 |
| Running on/with | Platform Versions |
|---|---|
Zte Blade A31 Plus | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Before m13 |
| Running on/with | Platform Versions |
|---|---|
Zte Blade A5 2019 | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.4 |
| Running on/with | Platform Versions |
|---|---|
Zte Blade A71 | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Before 11.0.3 |
| Running on/with | Platform Versions |
|---|---|
Zte Blade A72 | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.14 |
| Running on/with | Platform Versions |
|---|---|
Zte Blade V20 Smart | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.11 |
| Running on/with | Platform Versions |
|---|---|
Zte Blade V30 | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.11 |
| Running on/with | Platform Versions |
|---|---|
Zte Blade V30 Vita | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Before 11.0.4_9046 |
| Running on/with | Platform Versions |
|---|---|
Zte V40 Pro | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Before 11.0.2_8045 |
| Running on/with | Platform Versions |
|---|---|
Zte Blade V40 Vita | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.0b26 |
| Running on/with | Platform Versions |
|---|---|
Zte Axon 40 Ultra | All versions |
References (2)
Source: psirt@zte.com.cn
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.