CVE-2022-23138: ZTE MF297D Firmware

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

ZTE's MF297D product has cryptographic issues vulnerability. Due to the use of weak random values, the security of the device is reduced, and it may face the risk of attack.

Affected products

• ZTE MF297D Firmware: version mf297d_nordic1_b05 only

Published 2022-06-09. Last modified 2026-06-17.