GCVE - cpe:2.3:h:zte:mf286r:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:zte:mf286r:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Zte (`a03dfd9f-ec80-5d2d-8d2d-86a72c3ab055`)
Product	Mf286R (`1e88feda-e9f6-53e2-bae0-eec2fdf28cd1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-25651`	not_vulnerable	2026-06-08 05:56:09.601129	SQL Injection Vulnerability in Some ZTE Mobile Internet Products MEDIUM (4.3) There is a SQL injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of SMS interface parameter, an authenticated attacker could use the vulnerability to execute SQL injection and cause information leak. Published: 2023-12-14T07:03:54.704Z Updated: 2024-08-02T11:25:19.271Z Open on db.gcve.eu Reference links https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1032684	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-25649`	not_vulnerable	2026-06-08 05:56:09.597728	OS Command Injection Vulnerability in a Mobile Internet Product of ZTE MEDIUM (6.8) There is a command injection vulnerability in a mobile internet product of ZTE. Due to insufficient validation of SET_DEVICE_LED interface parameter, an authenticated attacker could use the vulnerability to execute arbitrary commands. Published: 2023-08-25T09:37:36.684Z Updated: 2024-10-02T15:09:39.756Z Open on db.gcve.eu Reference links https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1032544	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-39073`	not_vulnerable	2026-06-08 05:47:17.878624	Details available There is a command injection vulnerability in ZTE MF286R, Due to insufficient validation of the input parameters, an attacker could use the vulnerability to execute arbitrary commands. Published: 2023-01-06T00:00:00.000Z Updated: 2025-04-10T13:46:29.688Z Open on db.gcve.eu Reference links https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1028664	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-39072`	not_vulnerable	2026-06-08 05:47:17.876161	Details available There is a SQL injection vulnerability in Some ZTE Mobile Internet products. Due to insufficient validation of the input parameters of the SNTP interface, an authenticated attacker could use the vulnerability to execute stored XSS attacks. Published: 2023-01-06T00:00:00.000Z Updated: 2025-04-10T13:47:22.701Z Open on db.gcve.eu Reference links https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1028624	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-39067`	not_vulnerable	2026-06-08 05:47:17.836731	Details available There is a buffer overflow vulnerability in ZTE MF286R. Due to lack of input validation on parameters of the wifi interface, an authenticated attacker could use the vulnerability to perform a denial of service attack. Published: 2022-11-22T00:00:00.000Z Updated: 2025-04-29T04:31:08.545Z Open on db.gcve.eu Reference links https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1027784	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-39066`	not_vulnerable	2026-06-08 05:47:17.836143	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.