CVE-2024-22068: ZTE ZXR10 160 Firmware

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper Privilege Management vulnerability in ZTE ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series on 64 bit allows Functionality Bypass.This issue affects ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series: V4.00.10 and earlier.

Affected products

• ZTE ZXR10 160 Firmware: before 6.00.10 (fixed in 6.00.10)
• ZTE ZXR10 1800-2s Firmware: before 6.00.10 (fixed in 6.00.10)
• ZTE ZXR10 2800-4 Firmware: before 6.00.10 (fixed in 6.00.10)
• ZTE ZXR10 3800-8 Firmware: before 6.00.10 (fixed in 6.00.10)

Published 2024-10-10. Last modified 2026-06-17.