High severity7.1NVD Advisory· Published Aug 8, 2024· Updated Jun 17, 2026

CVE-2024-22069

Description

There is a permission and access control vulnerability of ZTE's ZXV10 XT802/ET301 product.Attackers with common permissions can log in the terminal web and change the password of the administrator illegally by intercepting requests to change the passwords.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zte/ZXV10 XT802cpe-rescue
Range: All versions up to V2.24.10P1
Zte/ZXV10 ET301cpe-rescue
Range: All versions up to V3.22.11P3
Zte/Zxv10 Et301 Firmware
cpe:2.3:o:zte:zxv10_et301_firmware:*:*:*:*:*:*:*:*
Range: <v3.22.11p3
Zte/Zxv10 Xt802 Firmware
cpe:2.3:o:zte:zxv10_xt802_firmware:*:*:*:*:*:*:*:*
Range: <v2.24.10p1
Zte/ZXV10 XT802/ET301llm-create

Patches

Vulnerability mechanics

References

support.zte.com.cn/support/news/LoopholeInfoDetail.aspxnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.461
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000