CVE-2024-22067 | THREATINT

Description

ZTE NH8091 product has an improper permission control vulnerability. Due to improper permission control of the Web module interface, an authenticated attacker may exploit the vulnerability to execute arbitrary commands.

PUBLISHED Reserved 2024-01-05 | Published 2024-11-18 | Updated 2025-03-13 | Assigner zte

MEDIUM: 6.8CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Problem types

CVE-2024-22067

Product status

Default status

unaffected

ZNH8091V1.8

affected

References

support.zte.com.cn/...ui/bulletin/detail/6179526095692935173

cve.org (CVE-2024-22067)

nvd.nist.gov (CVE-2024-22067)

Download JSON