9.1
Critical
CVE-2022-23144 There is a broken access control vulnerability in ZTE ZXvSTB product
Description
There is a broken access control vulnerability in ZTE ZXvSTB product. Due to improper permission control, attackers could use this vulnerability to delete the default application type, which affects normal use of system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ZXvSTB | Versions not published |
References
- support.zte.com.cn support.zte.com.cn
Timeline
- Published
- Last modified