Medium severity6.8NVD Advisory· Published Nov 18, 2024· Updated Jun 17, 2026

CVE-2024-22067

Description

ZTE NH8091 product has an improper permission control vulnerability. Due to improper permission control of the Web module interface, an authenticated attacker may exploit the vulnerability to execute arbitrary commands.

Affected products

Zte/Nh8091 Firmware
cpe:2.3:o:zte:nh8091_firmware:znh8091v1.8:*:*:*:*:*:*:*
Zte/NH8091cpe-rescue2 versions
ZNH8091V1.8+ 1 more
- (no CPE)range: ZNH8091V1.8
- (no CPE)

Patches

Vulnerability mechanics

References

support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/6179526095692935173nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.442
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000