What’s Vulnerable › Vulnerabilities

CVE-2024-22066

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-10-29 · updated 2026-06-17
• Weakness: CWE-294

Description

There is a privilege escalation vulnerability in ZTE ZXR10 ZSR V2 intelligent multi service router . An authenticated attacker could use the vulnerability to obtain sensitive information about the device.

Affected products

• ZTE Zxr10 160 Firmware: through 3.00.40
• ZTE ZXR10 1800-2S: through 3.00.40
• ZTE Zxr10 2800-4 Firmware: through 3.00.40
• ZTE Zxr10 3800-8 Firmware: through 3.00.40

References

• https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/1171513586716225590

Get alerted when CVE-2024-22066 or the next vulnerability affects your stack