Skip to content
CVE PROGRAM SOURCE RECORD7.6 High

CVE-2024-22063

ZTE ZENIC ONE R58 product has a CSV injection vulnerability

Description

The ZENIC ONE R58 products by ZTE Corporation have a command injection vulnerability. An authenticated attacker can exploit this vulnerability to tamper with messages, inject malicious code, and subsequently launch attacks on related devices.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ZTE ZENIC ONE R58

Default version status: unaffected

  • 0 to ≤ ZENIC ONE R58V16.24.20SP01affected

References