CVE-2022-23143
Severity Score
6.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
ZTE OTCP product is impacted by a permission and access control vulnerability. Due to improper permission settings, an attacker with high permissions could use this vulnerability to maliciously delete and modify files.
El producto ZTE OTCP se ve afectado por una vulnerabilidad de control de permisos y acceso. Debido a una configuración de permisos incorrecta, un atacante con permisos elevados podrÃa utilizar esta vulnerabilidad para eliminar y modificar archivos de forma maliciosa.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2022-01-11 CVE Reserved
- 2022-12-05 CVE Published
- 2024-06-27 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-732: Incorrect Permission Assignment for Critical Resource
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1026164 | 2023-01-23 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Zte Search vendor "Zte" | Otcp Firmware Search vendor "Zte" for product "Otcp Firmware" | < 2.21.40.06 Search vendor "Zte" for product "Otcp Firmware" and version " < 2.21.40.06" | - |
Affected
| in | Zte Search vendor "Zte" | Otcp Search vendor "Zte" for product "Otcp" | - | - |
Safe
|