Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-23135

Опубликовано: 24 фев. 2022
Источник: nvd
CVSS3: 6.5
CVSS2: 5.5
EPSS Низкий

Описание

There is a directory traversal vulnerability in some home gateway products of ZTE. Due to the lack of verification of user modified destination path, an attacker with specific permissions could modify the FTP access path to access and modify the system path contents without authorization, which will cause information leak and affect device operation.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:zte:zxhn_f677_firmware:*:*:*:*:*:*:*:*
Версия до 9.0.0p1n29 (исключая)
cpe:2.3:h:zte:zxhn_f677:-:*:*:*:*:*:*:*
Конфигурация 2

Одновременно

cpe:2.3:o:zte:zxhn_f477_firmware:*:*:*:*:*:*:*:*
Версия до 9.0.0p1n29 (исключая)
cpe:2.3:h:zte:zxhn_f477:-:*:*:*:*:*:*:*

EPSS

Процентиль: 58%
0.00367
Низкий

6.5 Medium

CVSS3

5.5 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 6.5
github
почти 4 года назад

There is a directory traversal vulnerability in some home gateway products of ZTE. Due to the lack of verification of user modified destination path, an attacker with specific permissions could modify the FTP access path to access and modify the system path contents without authorization, which will cause information leak and affect device operation.

EPSS

Процентиль: 58%
0.00367
Низкий

6.5 Medium

CVSS3

5.5 Medium

CVSS2

Дефекты

CWE-22