CVE-2022-39070

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

There is an access control vulnerability in some ZTE PON OLT products. Due to improper access control settings, remote attackers could use the vulnerability to log in to the device and execute any operation.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published: Nov 22, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-390717.1There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could over CVE-2022-390725.4There is a SQL injection vulnerability in Some ZTE Mobile Internet products. Due to insufficient validation of the input parameters of the S CVE-2022-390739.8There is a command injection vulnerability in ZTE MF286R, Due to insufficient validation of the input parameters, an attacker could use the CVE-2022-390743.3There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could star CVE-2022-390757.1There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could dele CVE-2022-39086.1The Helloprint WordPress plugin before 1.4.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Re CVE-2022-390807.8In messaging service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional CVE-2022-390816.7In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges n CVE-2022-390826.7In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges n CVE-2022-390836.7In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges n CVE-2022-390846.7In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges n CVE-2022-390856.7In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges n