CVE-2022-39067: ZTE MF286R Firmware

Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days.

There is a buffer overflow vulnerability in ZTE MF286R. Due to lack of input validation on parameters of the wifi interface, an authenticated attacker could use the vulnerability to perform a denial of service attack.

Affected products

• ZTE MF286R Firmware: before mf286r_b07 (fixed in mf286r_b07)

Published 2022-11-22. Last modified 2026-06-17.