ZTE ZXA10 c300m Firmware vulnerabilities

2 CVEs affecting ZTE ZXA10 c300m Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-39070, published 2022-11-22.

More from ZTE.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-21728, published 2021-04-09. Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days. A ZTE product has a configuration error vulnerability. Because a certain port is open by default, an attacker can consume system processing resources by flushing a large number of packets to the…
• CVE-2022-39070, published 2022-11-22. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. There is an access control vulnerability in some ZTE PON OLT products. Due to improper access control settings, remote attackers could use the vulnerability to log in to the device and execute any…