ZTE OTCP Product Permission and Access Control Vulnerability

ZTE OTCP Product Permission and Access Control Vulnerability

CVE-2022-23143 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

ZTE OTCP product is impacted by a permission and access control vulnerability. Due to improper permission settings, an attacker with high permissions could use this vulnerability to maliciously delete and modify files.

Learn more about our Web Application Penetration Testing UK.