ZTE Zxmp m721 Firmware vulnerabilities

2 CVEs affecting ZTE Zxmp m721 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-23141, published 2022-07-15.

More from ZTE.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-23141, published 2022-07-15. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. ZXMP M721 has an information leak vulnerability. Since the serial port authentication on the ZBOOT interface is not effective although it is enabled, an attacker could use this vulnerability to log…
• CVE-2022-23139, published 2022-05-12. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. ZTE's ZXMP M721 product has a permission and access control vulnerability. Since the folder permission viewed by sftp is 666, which is inconsistent with the actual permission. It’s easy for?users…