Vulnerability · Published Dec 30, 2024 · Assigned by zte
CVE-2024-22063ZTE ZENIC ONE R58 product has a CSV injection vulnerability
High 7.6
In plain English
A high-severity security flaw in ZENIC ONE R58 from ZTE. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 58% of all known vulnerabilities).
Severity (CVSS 3.1)7.6High
Exploit odds (30 days)0.8%top 42.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The ZENIC ONE R58 products by ZTE Corporation have a command injection vulnerability. An authenticated attacker can exploit this vulnerability to tamper with messages, inject malicious code, and subsequently launch attacks on related devices.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ZTE | ZENIC ONE R58 | 0 – through ZENIC ONE R58V16.24.20SP01 |
Weakness: CWE-1236 · Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H