CVE-2022-23138 — HIGH (7.5)

Vulnerability Description

ZTE's MF297D product has cryptographic issues vulnerability. Due to the use of weak random values, the security of the device is reduced, and it may face the risk of attack.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Zte	Mf297D Firmware	mf297d_nordic1_b05
Zte	Mf297D	-

Related Weaknesses (CWE)

CWE-330

References

https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1024624Vendor Advisory
https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1024624Vendor Advisory

FAQ

What is CVE-2022-23138?

CVE-2022-23138 is a vulnerability with a CVSS score of 7.5 (HIGH). ZTE's MF297D product has cryptographic issues vulnerability. Due to the use of weak random values, the security of the device is reduced, and it may face the risk of attack.

How severe is CVE-2022-23138?

CVE-2022-23138 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-23138?

Check the references section above for vendor advisories and patch information. Affected products include: Zte Mf297D Firmware, Zte Mf297D.