Permission and Access Control Vulnerability in ZTE OTCP Product
CVE-2022-23143

6.5MEDIUM

Key Information:

Vendor

Zte

Status
Otcp
Vendor
CVE Published:
5 December 2022

What is CVE-2022-23143?

The ZTE OTCP product is susceptible to a vulnerability that arises from improper permission settings. Attackers with elevated permissions may exploit this flaw to maliciously delete or modify critical files, jeopardizing the integrity and availability of the system. It is crucial for users to ensure that the appropriate permission protocols are in place to mitigate potential security risks.

Affected Version(s)

OTCP V2.21.40.06RC1

References

https://support.zte.com.cn/support/news/LoopholeInfoDetai...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.