Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-22065

There is a command injection vulnerability in ZTE MF258 Pro product. Due to insufficient validation of Ping Diagnosis interface parameter, an authenticated attacker could use the vulnerability to execute arbitrary commands.

Published

2024-10-29T02:15:06.933

Last Modified

2025-01-28T17:13:43.877

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.8 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-20
  • Type: Primary
    CWE-78
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System zte mf258k_pro_firmware 1.0.0b03 Yes
Hardware zte mf258k_pro - No
References