CVEvulnerability

CVE-2022-23138

7.5 HIGH Published 2022-06-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-06-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-330

Description

ZTE's MF297D product has cryptographic issues vulnerability. Due to the use of weak random values, the security of the device is reduced, and it may face the risk of attack.

Affected configurations

• zte mf297d firmware mf297d nordic1 b05

Related

Weakness · CWE (1)

  • CWE-330 Use of Insufficiently Random Values weakness

References