ZTE Axon 40 Ultra Firmware vulnerabilities

4 CVEs affecting ZTE Axon 40 Ultra Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-25647, published 2023-08-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-39075, published 2023-05-30. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could delete some system files without user permission.
CVE-2022-39071, published 2023-05-30. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could overwrite some system configuration files and user installers…
CVE-2022-39074, published 2023-05-30. Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days. There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could start a non-public interface of an application without user…
CVE-2023-25647, published 2023-08-17. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. There is a permission and access control vulnerability in some ZTE mobile phones. Due to improper access control, applications in mobile phone could monitor the touch event.