CVE-2024-22064
High
Description
ZTE ZXUN-ePDG product, which serves as the network node of the VoWifi system, under by default configuration, uses a set of non-unique cryptographic keys during establishing a secure connection(IKE) with the mobile devices connecting over the internet . If the set of keys are leaked or cracked, the user session informations using the keys may be leaked.
SeverityHigh
CVSS8.3
Exploit probability—
ProductZte Zxun-epdg
PublishedMay 14, 2024
First seenMay 14, 2024
Weakness typeCWE-1051CWE-1051
How to fix
Update
- zte zxun-epdg5.20.20 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zte zxun-epdg | v < 5.20.20 | 5.20.20 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.