ByteOS Network

NVD Vulnerability Details :

CVE-2022-23138

Analyzed

Source-psirt@zte.com.cn

Published At-09 Jun, 2022 | 15:15

Updated At-15 Jun, 2022 | 15:50

ZTE's MF297D product has cryptographic issues vulnerability. Due to the use of weak random values, the security of the device is reduced, and it may face the risk of attack.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N

CPE Matches

ZTE Corporation

>>mf297d_firmware>>mf297d_nordic1_b05

cpe:2.3:o:zte:mf297d_firmware:mf297d_nordic1_b05:*:*:*:*:*:*:*

ZTE Corporation

>>mf297d>>-

cpe:2.3:h:zte:mf297d:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-330	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1024624	psirt@zte.com.cn	Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History