CVE-2022-39069

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-11-08 · updated 2026-06-17
Weakness: CWE-89

Description

There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malicious requests. Exploitation of this vulnerability could cause the leakage of the current table content.

Affected products

ZAIP-AIE: before 8.22.02 — fixed in 8.22.02

How to fix

Upgrade to a fixed version: ZAIP-AIE 8.22.02. Check the vendor advisory for mitigations.

References

https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1026604
https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1026604

Get alerted when CVE-2022-39069 or the next vulnerability affects your stack