There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malicious requests. Exploitation of this vulnerability could cause the leakage of the current table content.
References
| Link | Resource |
|---|---|
| https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1026604 | Vendor Advisory |
| https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1026604 | Vendor Advisory |
Configurations
History
21 Nov 2024, 07:17
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1026604 - Vendor Advisory |
09 Nov 2022, 16:44
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1026604 - Vendor Advisory | |
| CWE | CWE-89 | |
| CPE | cpe:2.3:a:zte:zaip-aie:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
08 Nov 2022, 19:25
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-11-08 18:15
Updated : 2024-11-21 07:17
NVD link : CVE-2022-39069
Mitre link : CVE-2022-39069
CVE.ORG link : CVE-2022-39069
JSON object : View
Products Affected
zte
- zaip-aie
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')