Skip to content
OpenAdvisories
Critical · 9.1 CVE-2022-23144 EUVD-2022-28235GHSA-4xjp-gp7m-jj8v

There is a broken access control vulnerability in ZTE ZXvSTB product. Due to improper permission control, attackers could use this vulnerab…

Published Sep 23, 2022 · Updated May 22, 2025 · Assigned by zte

Description

There is a broken access control vulnerability in ZTE ZXvSTB product. Due to improper permission control, attackers could use this vulnerability to delete the default application type, which affects normal use of system.

Affected products

VendorProductAffectedFixed
— ZXvSTB All versions up to ZXvSTB-CAMSV2.01.02.01 —

References