CVE-2022-39073

There is a command injection vulnerability in ZTE MF286R, Due to insufficient validation of the input parameters, an attacker could use the vulnerability to execute arbitrary commands.

Affected

MF286R

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

3.38% chance of exploitation in the next 30 days, 89th percentile

Published

2023-01-06

Updated

2025-04-10

Proof-of-concept exploits (1)

• v0lp3/CVE-2022-3907311★ · 2023-01-07

Security advisories

• https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1028664

References

• CVE Record
• NVD entry

Related

• CVE-2022-39066