Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2024-22065

ZTE MF258 Pro product has a OS Command injection vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
zte

Description

There is a command injection vulnerability in ZTE MF258 Pro product. Due to insufficient validation of Ping Diagnosis interface parameter, an authenticated attacker could use the vulnerability to execute arbitrary commands.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ZTE MF258 Pro

Default version status: unaffected

  • ZTE_MF258PRO_STD_V1.0.0B03affected

References