Vulnerability Details CVE-2024-22065
There is a command injection vulnerability in ZTE MF258 Pro product. Due to insufficient validation of Ping Diagnosis interface parameter, an authenticated attacker could use the vulnerability to execute arbitrary commands.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 59.3%
CVSS Severity
CVSS v3 Score 6.8
Products affected by CVE-2024-22065
-
cpe:2.3:h:zte:mf258k_pro:-
-
cpe:2.3:o:zte:mf258k_pro_firmware:1.0.0b03