Skip to content
Sign in
8.8 High

CVE-2022-39066 There is a SQL injection vulnerability in ZTE MF286R

Description

There is a SQL injection vulnerability in ZTE MF286R. Due to insufficient validation of the input parameters of the phonebook interface, an authenticated attacker could use the vulnerability to execute arbitrary SQL injection.

Affected products and versions

Product Affected versions Fixed in
MF286R Versions not published

Other CVEs of MF286R

The 3 CVEs of MF286R →
CVE-2022-39073 There is a command injection vulnerability in ZTE MF286R, Due to insufficient validation of the input parameters, an… 9.8 Critical CVE-2022-39067 There is a buffer overflow vulnerability in ZTE MF286R 6.5 Medium
Track this CVE