VulnerabilityModified
CVE-2022-23135
There is a directory traversal vulnerability in some home gateway products of ZTE.
MEDIUM 6.5EPSS 1.40%
Does this matter?
Lower severity and a low EPSS score (1.40%). Track it; it rarely justifies an emergency change on its own.
Description
There is a directory traversal vulnerability in some home gateway products of ZTE. Due to the lack of verification of user modified destination path, an attacker with specific permissions could modify the FTP access path to access and modify the system path contents without authorization, which will cause information leak and affect device operation.
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H
- EPSS
- 1.40% probability · 71th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- zte/zxhn f677 firmware · zte/zxhn f477 firmware
- Source
- psirt@zte.com.cn
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.