CVE-2022-23143: ZTE Otcp Firmware

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

ZTE OTCP product is impacted by a permission and access control vulnerability. Due to improper permission settings, an attacker with high permissions could use this vulnerability to maliciously delete and modify files.

Affected products

• ZTE Otcp Firmware: before 2.21.40.06 (fixed in 2.21.40.06)

Published 2022-12-05. Last modified 2026-06-17.