Read the docs
TI-2022-18466 Aliases CVE-2022-39074GHSA-87gp-gpv8-xxg6

There is an unauthorized access vulnerability in some ZTE mobile phones.

Priority LOW 16Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · Low · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.

Summary

There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could start a non-public interface of an application without user permission.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00289 21st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
—ZTE Blade A52, ZTE Blade A51, ZTE Blade A3 Lite, ZTE Blade A5 2020, ZTE Blade L210, ZTE Blade A7s, ZTE Blade A31, ZTE Blade A31 Plus, ZTE Blade A5 (2019), ZTE Blade A71, ZTE Blade A72, ZTE Blade V20 Smart, ZTE Blade V30, ZTE Blade V30 Vita, ZTE V40 Pro, ZTE Blade V40 Vita, ZTE Axon 40 UltraAll versions up to Z6356T_M01, All versions up to Blade A51_M06, All versions up to Blade A30_M08, All versions up to Blade A5 2020-T_M04, All versions up to GEN_MY_L210_V1.13, All versions up to CLA_GT_A7020_V2.1, All versions up to Blade A31_M02, All versions up to P600_M03, All versions up to P650 Pro_M12, All versions up to GEN_EU_EEA_A7030_V2.3, All versions up to MyOS11.0.2_A7039_CLA_CO, All versions up to TEL_MX_ZTE_8010V1.13, All versions up to TEL_MX_ZTE_9030V1.10, All versions up to TEL_MX_ZTE_8030V1.10, All versions up to MyOS11.0.3_9045_TEL All versions up to MyOS11.0.1_8044_CLA_CO, All versions up to NON_EEA_P898F01V1.0.0B25—No fix listedCNA
  • ZTE Blade A52, ZTE Blade A51, ZTE Blade A3 Lite, ZTE Blade A5 2020, ZTE Blade L210, ZTE Blade A7s, ZTE Blade A31, ZTE Blade A31 Plus, ZTE Blade A5 (2019), ZTE Blade A71, ZTE Blade A72, ZTE Blade V20 Smart, ZTE Blade V30, ZTE Blade V30 Vita, ZTE V40 Pro, ZTE Blade V40 Vita, ZTE Axon 40 Ultra Vendor— Affected All versions up to Z6356T_M01, All versions up to Blade A51_M06, All versions up to Blade A30_M08, All versions up to Blade A5 2020-T_M04, All versions up to GEN_MY_L210_V1.13, All versions up to CLA_GT_A7020_V2.1, All versions up to Blade A31_M02, All versions up to P600_M03, All versions up to P650 Pro_M12, All versions up to GEN_EU_EEA_A7030_V2.3, All versions up to MyOS11.0.2_A7039_CLA_CO, All versions up to TEL_MX_ZTE_8010V1.13, All versions up to TEL_MX_ZTE_9030V1.10, All versions up to TEL_MX_ZTE_8030V1.10, All versions up to MyOS11.0.3_9045_TEL All versions up to MyOS11.0.1_8044_CLA_CO, All versions up to NON_EEA_P898F01V1.0.0B25 Fixed in — No fix listed CNA

CPE configurations NVD · 34

CPEVersionsRoleVendor
cpe:2.3:o:zte:blade_a52_firmware:*:*:*:*:*:*:*:*before m02VulnerableZTE
cpe:2.3:h:zte:blade_a52:-:*:*:*:*:*:*:*not specified by NVDRunning onZTE
cpe:2.3:o:zte:blade_a51_firmware:*:*:*:*:*:*:*:*before m07VulnerableZTE
cpe:2.3:h:zte:blade_a51:-:*:*:*:*:*:*:*not specified by NVDRunning onZTE
cpe:2.3:o:zte:blade_a3_lite_firmware:*:*:*:*:*:*:*:*before m09VulnerableZTE
cpe:2.3:h:zte:blade_a3_lite:-:*:*:*:*:*:*:*not specified by NVDRunning onZTE
cpe:2.3:o:zte:blade_a5_2020_firmware:*:*:*:*:*:*:*:*before m05VulnerableZTE
cpe:2.3:h:zte:blade_a5_2020:-:*:*:*:*:*:*:*not specified by NVDRunning onZTE
cpe:2.3:o:zte:blade_l210_firmware:*:*:*:*:*:*:*:*before 1.14VulnerableZTE
cpe:2.3:h:zte:blade_l210:-:*:*:*:*:*:*:*not specified by NVDRunning onZTE
  • cpe:2.3:o:zte:blade_a52_firmware:*:*:*:*:*:*:*:* Versions before m02 Vulnerable ·ZTE
  • cpe:2.3:h:zte:blade_a52:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ZTE
  • cpe:2.3:o:zte:blade_a51_firmware:*:*:*:*:*:*:*:* Versions before m07 Vulnerable ·ZTE
  • cpe:2.3:h:zte:blade_a51:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ZTE
  • cpe:2.3:o:zte:blade_a3_lite_firmware:*:*:*:*:*:*:*:* Versions before m09 Vulnerable ·ZTE
  • cpe:2.3:h:zte:blade_a3_lite:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ZTE
  • cpe:2.3:o:zte:blade_a5_2020_firmware:*:*:*:*:*:*:*:* Versions before m05 Vulnerable ·ZTE
  • cpe:2.3:h:zte:blade_a5_2020:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ZTE
  • cpe:2.3:o:zte:blade_l210_firmware:*:*:*:*:*:*:*:* Versions before 1.14 Vulnerable ·ZTE
  • cpe:2.3:h:zte:blade_l210:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ZTE
Show 24 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:zte:blade_a7s_firmware:*:*:*:*:*:*:*:*before 2.2VulnerableZTE
cpe:2.3:h:zte:blade_a7s:-:*:*:*:*:*:*:*not specified by NVDRunning onZTE
cpe:2.3:o:zte:blade_a31_firmware:*:*:*:*:*:*:*:*before m03VulnerableZTE
cpe:2.3:h:zte:blade_a31:-:*:*:*:*:*:*:*not specified by NVDRunning onZTE
cpe:2.3:o:zte:blade_a31_plus_firmware:*:*:*:*:*:*:*:*before m04VulnerableZTE
cpe:2.3:h:zte:blade_a31_plus:-:*:*:*:*:*:*:*not specified by NVDRunning onZTE
cpe:2.3:o:zte:blade_a5_2019_firmware:*:*:*:*:*:*:*:*before m13VulnerableZTE
cpe:2.3:h:zte:blade_a5_2019:-:*:*:*:*:*:*:*not specified by NVDRunning onZTE
cpe:2.3:o:zte:blade_a71_firmware:*:*:*:*:*:*:*:*before 2.4VulnerableZTE
cpe:2.3:h:zte:blade_a71:-:*:*:*:*:*:*:*not specified by NVDRunning onZTE
cpe:2.3:o:zte:blade_a72_firmware:*:*:*:*:*:*:*:*before 11.0.3VulnerableZTE
cpe:2.3:h:zte:blade_a72:-:*:*:*:*:*:*:*not specified by NVDRunning onZTE
cpe:2.3:o:zte:blade_v20_smart_firmware:*:*:*:*:*:*:*:*before 1.14VulnerableZTE
cpe:2.3:h:zte:blade_v20_smart:-:*:*:*:*:*:*:*not specified by NVDRunning onZTE
cpe:2.3:o:zte:blade_v30_firmware:*:*:*:*:*:*:*:*before 1.11VulnerableZTE
cpe:2.3:h:zte:blade_v30:-:*:*:*:*:*:*:*not specified by NVDRunning onZTE
cpe:2.3:o:zte:blade_v30_vita_firmware:*:*:*:*:*:*:*:*before 1.11VulnerableZTE
cpe:2.3:h:zte:blade_v30_vita:-:*:*:*:*:*:*:*not specified by NVDRunning onZTE
cpe:2.3:o:zte:v40_pro_firmware:*:*:*:*:*:*:*:*before 11.0.4_9046VulnerableZTE
cpe:2.3:h:zte:v40_pro:-:*:*:*:*:*:*:*not specified by NVDRunning onZTE
cpe:2.3:o:zte:blade_v40_vita_firmware:*:*:*:*:*:*:*:*before 11.0.2_8045VulnerableZTE
cpe:2.3:h:zte:blade_v40_vita:-:*:*:*:*:*:*:*not specified by NVDRunning onZTE
cpe:2.3:o:zte:axon_40_ultra_firmware:*:*:*:*:*:*:*:*before 1.0.0b26VulnerableZTE
cpe:2.3:h:zte:axon_40_ultra:-:*:*:*:*:*:*:*not specified by NVDRunning onZTE
  • cpe:2.3:o:zte:blade_a7s_firmware:*:*:*:*:*:*:*:* Versions before 2.2 Vulnerable ·ZTE
  • cpe:2.3:h:zte:blade_a7s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ZTE
  • cpe:2.3:o:zte:blade_a31_firmware:*:*:*:*:*:*:*:* Versions before m03 Vulnerable ·ZTE
  • cpe:2.3:h:zte:blade_a31:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ZTE
  • cpe:2.3:o:zte:blade_a31_plus_firmware:*:*:*:*:*:*:*:* Versions before m04 Vulnerable ·ZTE
  • cpe:2.3:h:zte:blade_a31_plus:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ZTE
  • cpe:2.3:o:zte:blade_a5_2019_firmware:*:*:*:*:*:*:*:* Versions before m13 Vulnerable ·ZTE
  • cpe:2.3:h:zte:blade_a5_2019:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ZTE
  • cpe:2.3:o:zte:blade_a71_firmware:*:*:*:*:*:*:*:* Versions before 2.4 Vulnerable ·ZTE
  • cpe:2.3:h:zte:blade_a71:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ZTE
  • cpe:2.3:o:zte:blade_a72_firmware:*:*:*:*:*:*:*:* Versions before 11.0.3 Vulnerable ·ZTE
  • cpe:2.3:h:zte:blade_a72:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ZTE
  • cpe:2.3:o:zte:blade_v20_smart_firmware:*:*:*:*:*:*:*:* Versions before 1.14 Vulnerable ·ZTE
  • cpe:2.3:h:zte:blade_v20_smart:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ZTE
  • cpe:2.3:o:zte:blade_v30_firmware:*:*:*:*:*:*:*:* Versions before 1.11 Vulnerable ·ZTE
  • cpe:2.3:h:zte:blade_v30:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ZTE
  • cpe:2.3:o:zte:blade_v30_vita_firmware:*:*:*:*:*:*:*:* Versions before 1.11 Vulnerable ·ZTE
  • cpe:2.3:h:zte:blade_v30_vita:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ZTE
  • cpe:2.3:o:zte:v40_pro_firmware:*:*:*:*:*:*:*:* Versions before 11.0.4_9046 Vulnerable ·ZTE
  • cpe:2.3:h:zte:v40_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ZTE
  • cpe:2.3:o:zte:blade_v40_vita_firmware:*:*:*:*:*:*:*:* Versions before 11.0.2_8045 Vulnerable ·ZTE
  • cpe:2.3:h:zte:blade_v40_vita:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ZTE
  • cpe:2.3:o:zte:axon_40_ultra_firmware:*:*:*:*:*:*:*:* Versions before 1.0.0b26 Vulnerable ·ZTE
  • cpe:2.3:h:zte:axon_40_ultra:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ZTE

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-39074
  2. 2026-10-03 Alias added: GHSA-87gp-gpv8-xxg6

References

Advisory 1

  • TI-2022-18467 There is an unauthorized access vulnerability in some ZTE mobile phones. CVSS 3.1HIGH 7.1
  • TI-2022-18463 There is an unauthorized access vulnerability in some ZTE mobile phones. CVSS 3.1HIGH 7.1
  • TI-2023-10928 Permission and Access Control Vulnerability in Some ZTE Mobile Phones CVSS 3.1MEDIUM 4.7

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences