ByteOS Network

Vulnerability Details :

CVE-2022-39071

Assigner-zte

Assigner Org ID-6786b568-6808-4982-b61f-398b0d9679eb

Published At-30 May, 2023 | 00:00

Updated At-13 Jan, 2025 | 20:40

There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could overwrite some system configuration files and user installers without user permission.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:zte

Assigner Org ID:6786b568-6808-4982-b61f-398b0d9679eb

Published At:30 May, 2023 | 00:00

Updated At:13 Jan, 2025 | 20:40

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

ZTE Blade A52, ZTE Blade A51, ZTE Blade A3 Lite, ZTE Blade A5 2020, ZTE Blade L210, ZTE Blade A7s, ZTE Blade A31, ZTE Blade A31 Plus, ZTE Blade A5 (2019), ZTE Blade A71, ZTE Blade A72, ZTE Blade V20 Smart, ZTE Blade V30, ZTE Blade V30 Vita, ZTE V40 Pro, ZTE Blade V40 Vita, ZTE Axon 40 Ultra

Versions

Affected

All versions up to Z6356T_M01, All versions up to Blade A51_M06, All versions up to Blade A30_M08, All versions up to Blade A5 2020-T_M04, All versions up to GEN_MY_L210_V1.13, All versions up to CLA_GT_A7020_V2.1, All versions up to Blade A31_M02, All versions up to P600_M03, All versions up to P650 Pro_M12, All versions up to GEN_EU_EEA_A7030_V2.3, All versions up to MyOS11.0.2_A7039_CLA_CO, All versions up to TEL_MX_ZTE_8010V1.13, All versions up to TEL_MX_ZTE_9030V1.10, All versions up to TEL_MX_ZTE_8030V1.10, All versions up to MyOS11.0.3_9045_TEL All versions up to MyOS11.0.1_8044_CLA_CO, All versions up to NON_EEA_P898F01V1.0.0B25

Problem Types

Type	CWE ID	Description
text	N/A	unauthorized access

Type: text

CWE ID: N/A

Description: unauthorized access

References

Hyperlink	Resource
https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1030664	N/A

Hyperlink: https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1030664

Resource: N/A

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1030664	x_transferred

Hyperlink: https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1030664

Resource:

x_transferred

2. CISA ADP Vulnrichment

Problem Types

Type	CWE ID	Description
CWE	CWE-noinfo	CWE-noinfo Not enough information

Type: CWE

CWE ID: CWE-noinfo

Description: CWE-noinfo Not enough information

Metrics

Version	Base score	Base severity	Vector
3.1	7.1	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Version: 3.1

Base score: 7.1

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Metrics Other Info

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:psirt@zte.com.cn

Published At:30 May, 2023 | 23:15

Updated At:13 Jan, 2025 | 21:15

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.1	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
Secondary	3.1	7.1	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Type: Primary

Version: 3.1

Base score: 7.1

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 7.1

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

CPE Matches

ZTE Corporation

>>blade_a52_firmware>>Versions before m02(exclusive)

cpe:2.3:o:zte:blade_a52_firmware:*:*:*:*:*:*:*:*

ZTE Corporation

>>blade_a52>>-

cpe:2.3:h:zte:blade_a52:-:*:*:*:*:*:*:*

ZTE Corporation

>>blade_a51_firmware>>Versions before m07(exclusive)

cpe:2.3:o:zte:blade_a51_firmware:*:*:*:*:*:*:*:*

ZTE Corporation

>>blade_a51>>-

cpe:2.3:h:zte:blade_a51:-:*:*:*:*:*:*:*

ZTE Corporation

>>blade_a3_lite_firmware>>Versions before m09(exclusive)

cpe:2.3:o:zte:blade_a3_lite_firmware:*:*:*:*:*:*:*:*

ZTE Corporation

>>blade_a3_lite>>-

cpe:2.3:h:zte:blade_a3_lite:-:*:*:*:*:*:*:*

ZTE Corporation

>>blade_a5_2020_firmware>>Versions before m05(exclusive)

cpe:2.3:o:zte:blade_a5_2020_firmware:*:*:*:*:*:*:*:*

ZTE Corporation

>>blade_a5_2020>>-

cpe:2.3:h:zte:blade_a5_2020:-:*:*:*:*:*:*:*

ZTE Corporation

>>blade_l210_firmware>>Versions before 1.14(exclusive)

cpe:2.3:o:zte:blade_l210_firmware:*:*:*:*:*:*:*:*

ZTE Corporation

>>blade_l210>>-

cpe:2.3:h:zte:blade_l210:-:*:*:*:*:*:*:*

ZTE Corporation

>>blade_a7s_firmware>>Versions before 2.2(exclusive)

cpe:2.3:o:zte:blade_a7s_firmware:*:*:*:*:*:*:*:*

ZTE Corporation

>>blade_a7s>>-

cpe:2.3:h:zte:blade_a7s:-:*:*:*:*:*:*:*

ZTE Corporation

>>blade_a31_firmware>>Versions before m03(exclusive)

cpe:2.3:o:zte:blade_a31_firmware:*:*:*:*:*:*:*:*

ZTE Corporation

>>blade_a31>>-

cpe:2.3:h:zte:blade_a31:-:*:*:*:*:*:*:*

ZTE Corporation

>>blade_a31_plus_firmware>>Versions before m04(exclusive)

cpe:2.3:o:zte:blade_a31_plus_firmware:*:*:*:*:*:*:*:*

ZTE Corporation

>>blade_a31_plus>>-

cpe:2.3:h:zte:blade_a31_plus:-:*:*:*:*:*:*:*

ZTE Corporation

>>blade_a5_2019_firmware>>Versions before m13(exclusive)

cpe:2.3:o:zte:blade_a5_2019_firmware:*:*:*:*:*:*:*:*

ZTE Corporation

>>blade_a5_2019>>-

cpe:2.3:h:zte:blade_a5_2019:-:*:*:*:*:*:*:*

ZTE Corporation

>>blade_a71_firmware>>Versions before 2.4(exclusive)

cpe:2.3:o:zte:blade_a71_firmware:*:*:*:*:*:*:*:*

ZTE Corporation

>>blade_a71>>-

cpe:2.3:h:zte:blade_a71:-:*:*:*:*:*:*:*

ZTE Corporation

>>blade_a72_firmware>>Versions before 11.0.3(exclusive)

cpe:2.3:o:zte:blade_a72_firmware:*:*:*:*:*:*:*:*

ZTE Corporation

>>blade_a72>>-

cpe:2.3:h:zte:blade_a72:-:*:*:*:*:*:*:*

ZTE Corporation

>>blade_v20_smart_firmware>>Versions before 1.14(exclusive)

cpe:2.3:o:zte:blade_v20_smart_firmware:*:*:*:*:*:*:*:*

ZTE Corporation

>>blade_v20_smart>>-

cpe:2.3:h:zte:blade_v20_smart:-:*:*:*:*:*:*:*

ZTE Corporation

>>blade_v30_firmware>>Versions before 1.11(exclusive)

cpe:2.3:o:zte:blade_v30_firmware:*:*:*:*:*:*:*:*

ZTE Corporation

>>blade_v30>>-

cpe:2.3:h:zte:blade_v30:-:*:*:*:*:*:*:*

ZTE Corporation

>>blade_v30_vita_firmware>>Versions before 1.11(exclusive)

cpe:2.3:o:zte:blade_v30_vita_firmware:*:*:*:*:*:*:*:*

ZTE Corporation

>>blade_v30_vita>>-

cpe:2.3:h:zte:blade_v30_vita:-:*:*:*:*:*:*:*

ZTE Corporation

>>v40_pro_firmware>>Versions before 11.0.4_9046(exclusive)

cpe:2.3:o:zte:v40_pro_firmware:*:*:*:*:*:*:*:*

ZTE Corporation

>>v40_pro>>-

cpe:2.3:h:zte:v40_pro:-:*:*:*:*:*:*:*

ZTE Corporation

>>blade_v40_vita_firmware>>Versions before 11.0.2_8045(exclusive)

cpe:2.3:o:zte:blade_v40_vita_firmware:*:*:*:*:*:*:*:*

ZTE Corporation

>>blade_v40_vita>>-

cpe:2.3:h:zte:blade_v40_vita:-:*:*:*:*:*:*:*

ZTE Corporation

>>axon_40_ultra_firmware>>Versions before 1.0.0b26(exclusive)

cpe:2.3:o:zte:axon_40_ultra_firmware:*:*:*:*:*:*:*:*

ZTE Corporation

>>axon_40_ultra>>-

cpe:2.3:h:zte:axon_40_ultra:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

CWE ID: NVD-CWE-Other

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1030664	psirt@zte.com.cn	Vendor Advisory
https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1030664	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory

Hyperlink: https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1030664

Source: psirt@zte.com.cn

Resource:

Vendor Advisory

Hyperlink: https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1030664

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

CVE-2022-39071

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs