high7.1
CVE-2024-22069
There is a permission and access control vulnerability of ZTE's ZXV10 XT802/ET301 product.Attackers with common permissions can log in the terminal web and cha…
Impact
There is a permission and access control vulnerability of ZTE's ZXV10 XT802/ET301 product.Attackers with common permissions can log in the terminal web and change the password of the administrator illegally by intercepting requests to change the passwords.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zte | Zxv10 Et301 Firmware | before v3.22.11p3 |
| Zte | Zxv10 Xt802 Firmware | before v2.24.10p1 |