← Database

CVE-2022-23144

CRITICAL CVSS: 9.1 Published: 2022-09-23 Modified: 2026-06-17

Description

There is a broken access control vulnerability in ZTE ZXvSTB product. Due to improper permission control, attackers could use this vulnerability to delete the default application type, which affects normal use of system.

Affected Platforms

Zte Zxa10 B710C-A12Zte Zxa10 B960Gv1 FirmwareZte Zxa10 B700V7 FirmwareZte Zxa10 S200TZte Zxa10 B866V5-W10Zte Zxa10 B836Ct-A15Zte Zxa10 S100VZte Zxa10 B766V2Zte Zxa10 B860Av2.1Zte Zxa10 S200T Firmware

Weakness Type

NVD-CWE-Other

References