CVE-2022-23139

 

Published at: - 12-05-2022 10:15

Last modified: - 23-05-2022 09:21

Total changes: - 3

Description

ZTE's ZXMP M721 product has a permission and access control vulnerability. Since the folder permission viewed by sftp is 666, which is inconsistent with the actual permission. It’s easy for?users to?ignore the modification?of?the file permission configuration, so that low-authority accounts could actually obtain higher operating permissions on key files.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1024444

 

Keywords

NVD

 

CVE-2022-23139

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures