Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: ZTE Component: Mf286r Firmware Clear all filters
TI-2022-18465 CVE-2022-39073 · GHSA-x7rx-9g3w-62mw

Command injection in MF286R

Priority MEDIUM 55

There is a command injection vulnerability in ZTE MF286R, Due to insufficient validation of the input parameters, an attacker could use the vulnerability to execute arbitrary commands.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03426 Published 2023-01-06 No fix listed CWE-77
TI-2022-18464 CVE-2022-39072 · GHSA-74m9-g2cj-84jp

SQL injection in MF286R,MF289D

Priority LOW 24

There is a SQL injection vulnerability in Some ZTE Mobile Internet products.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00361 Published 2023-01-06 No fix listed CWE-89
TI-2022-18459 CVE-2022-39067 · GHSA-wr28-mqhp-8rvc

Buffer overflow in MF286R

Priority LOW 30

There is a buffer overflow vulnerability in ZTE MF286R.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00663 Published 2022-11-22 No fix listed CWE-120
TI-2022-18458 CVE-2022-39066 · GHSA-2m5w-88gg-379g

SQL injection in MF286R

Priority MEDIUM 62

There is a SQL injection vulnerability in ZTE MF286R.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.26542 Published 2022-11-22 No fix listed CWE-89