CVE-2022-39069
Medium
Description
There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malicious requests. Exploitation of this vulnerability could cause the leakage of the current table content.
SeverityMedium
CVSS5.3
Exploit probability—
ProductZte Zaip-aie
PublishedNov 8, 2022
First seenNov 8, 2022
Weakness typeCWE-89SQL injection
How to fix
Update
- zte zaip-aie8.22.02 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zte zaip-aie | v < 8.22.02 | 8.22.02 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.