CVE-2024-22064: ZTE Zxun-Epdg

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

ZTE ZXUN-ePDG product, which serves as the network node of the VoWifi system, under by default configuration, uses a set of non-unique cryptographic keys during establishing a secure connection(IKE) with the mobile devices connecting over the internet . If the set of keys are leaked or cracked, the user session informations using the keys may be leaked.

Affected products

• ZTE Zxun-Epdg: before 5.20.20 (fixed in 5.20.20)

Published 2024-05-14. Last modified 2026-06-17.