Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2024-22064

Configuration error Vulnerability in ZTE ZXUN-ePDG

Description

ZTE ZXUN-ePDG product, which serves as the network node of the VoWifi system, under by default configuration, uses a set of non-unique cryptographic keys during establishing a secure connection(IKE) with the mobile devices connecting over the internet . If the set of keys are leaked or cracked, the user session informations using the keys may be leaked.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ZTE ZXUN-ePDG

Default version status: unaffected

  • V5.20.15 to ≤ V5.20.19affected

References