CVE-2022-39073

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-01-06 · updated 2026-06-17
Weakness: CWE-77

Description

There is a command injection vulnerability in ZTE MF286R, Due to insufficient validation of the input parameters, an attacker could use the vulnerability to execute arbitrary commands.

Affected products

MF286R: nordic_mf286r_b06

References

https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1028664
https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1028664

Get alerted when CVE-2022-39073 or the next vulnerability affects your stack