High severity7.5NVD Advisory· Published Oct 29, 2024· Updated Jun 17, 2026

CVE-2024-22066

Description

There is a privilege escalation vulnerability in ZTE ZXR10 ZSR V2 intelligent multi service router . An authenticated attacker could use the vulnerability to obtain sensitive information about the device.

Affected products

Zte/Zxr10 160 Firmware
cpe:2.3:o:zte:zxr10_160_firmware:*:*:*:*:*:*:*:*
Range: <=3.00.40
Zte/ZXR10 1800-2S2 versions
cpe:2.3:o:zte:zxr10_1800-2s_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:zte:zxr10_1800-2s_firmware:*:*:*:*:*:*:*:*range: <=3.00.40
- (no CPE)range: ZSRV2 V3.00.40
Zte/Zxr10 2800 4 Firmware
cpe:2.3:o:zte:zxr10_2800-4_firmware:*:*:*:*:*:*:*:*
Range: <=3.00.40
Zte/Zxr10 3800 8 Firmware
cpe:2.3:o:zte:zxr10_3800-8_firmware:*:*:*:*:*:*:*:*
Range: <=3.00.40
Zte/ZXR10 ZSR V2llm-fuzzy

Patches

Vulnerability mechanics

References

support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/1171513586716225590nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000