CVE-2024-22069: ZTE ZXV10 ET301 Firmware

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

There is a permission and access control vulnerability of ZTE's ZXV10 XT802/ET301 product.Attackers with common permissions can log in the terminal web and change the password of the administrator illegally by intercepting requests to change the passwords.

Affected products

• ZTE ZXV10 ET301 Firmware: before v3.22.11p3 (fixed in v3.22.11p3)
• ZTE ZXV10 XT802 Firmware: before v2.24.10p1 (fixed in v2.24.10p1)

Published 2024-08-08. Last modified 2026-06-17.