CVE-2022-23144

critical

Description

There is a broken access control vulnerability in ZTE ZXvSTB product. Due to improper permission control, attackers could use this vulnerability to delete the default application type, which affects normal use of system.

References

https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1026224

Details

Source: Mitre, NVD

Published: 2022-09-23

Updated: 2023-08-08

Risk Information

CVSS v2

Base Score: 9.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:C/A:C

Severity: High

CVSS v3

Base Score: 9.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Severity: Critical