Skip to content
OpenAdvisories
High · 7.6 CVE-2024-22063 EUVD-2024-19661GHSA-m7rr-9vhr-9v38

ZTE ZENIC ONE R58 product has a CSV injection vulnerability

Published Dec 30, 2024 · Updated Dec 30, 2024 · Assigned by zte

Description

The ZENIC ONE R58 products by ZTE Corporation have a command injection vulnerability. An authenticated attacker can exploit this vulnerability to tamper with messages, inject malicious code, and subsequently launch attacks on related devices.

Affected products

VendorProductAffectedFixed
ZTE ZENIC ONE R58 ≤ ZENIC ONE R58V16.24.20SP01 —

References