critical9.8
CVE-2022-39070
There is an access control vulnerability in some ZTE PON OLT products.
Impact
There is an access control vulnerability in some ZTE PON OLT products. Due to improper access control settings, remote attackers could use the vulnerability to log in to the device and execute any operation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zte | Zxa10 C350m Firmware | from 2.1.0 before 2.1.0xgp002.4 |
| Zte | Zxa10 C300m Firmware | from 2.1.0 before 2.1.0xgp002.4 |