[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fTdwWCg83TxIRN-KgKEo6tqesGXyWZzdGr97NQPpxPc8":3,"g5a-risk:CVE-2023-22920":126},{"success":4,"data":5,"meta":123},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":27,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":54,"references":55,"referencesCount":61,"weaknesses":62,"weaknessesCount":61,"isActivelyExploited":71,"cisaInfo":27,"otxData":27,"relatedBlogPosts":72,"seoMetadata":73,"configurations":98,"relatedVendorCves":121,"notableEvents":122},"CVE-2023-22920","What is CVE-2023-22920?","A security misconfiguration vulnerability exists in the Zyxel LTE3316-M604 firmware version V2.00(ABMP.6)C0 due to a factory default misconfiguration intended for testing purposes. A remote attacker could leverage this vulnerability to access an affected device using Telnet.","A security misconfiguration vulnerability exists in the Zyxel LTE3316-M604 firmware version V2.00(ABMP.6)C0 due to a factory default misconfiguration intende...","2023-02-21T16:15:11.743","2023-03-02T16:24:17.283",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"security@zyxel.com.tw","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},0.00842,[34,34,34,34,34,34,34],"Critical",[38,43,47,51],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"zyxel","lte3202-m437_firmware","1.00\\(abwf.1\\)c0","cpe:2.3:o:zyxel:lte3202-m437_firmware:1.00\\(abwf.1\\)c0:*:*:*:*:*:*:*",{"vendor":39,"product":44,"version":45,"criteria":46,"vulnerable":4},"lte3202-m437","-","cpe:2.3:h:zyxel:lte3202-m437:-:*:*:*:*:*:*:*",{"vendor":39,"product":48,"version":49,"criteria":50,"vulnerable":4},"lte3316-m604_firmware","2.00\\(abmp.6\\)c0","cpe:2.3:o:zyxel:lte3316-m604_firmware:2.00\\(abmp.6\\)c0:*:*:*:*:*:*:*",{"vendor":39,"product":52,"version":45,"criteria":53,"vulnerable":4},"lte3316-m604","cpe:2.3:h:zyxel:lte3316-m604:-:*:*:*:*:*:*:*",4,[56],{"url":57,"source":58,"tags":59},"https:\u002F\u002Fwww.zyxel.com\u002Fglobal\u002Fen\u002Fsupport\u002Fsecurity-advisories\u002Fzyxel-security-advisory-for-security-misconfiguration-vulnerability-of-4g-lte-indoor-routers","Zyxel",[60],"Vendor Advisory",1,[63],{"id":64,"name":65,"description":66,"extendedDescription":67,"status":68,"abstraction":69,"structure":70},"CWE-284","Improper Access Control","The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.","Access control involves the use of several protection mechanisms such as:\nWhen any mechanism is not applied or otherwise fails, attackers can compromise the security of the product by gaining privileges, reading sensitive information, executing commands, evading detection, etc.\nThere are two distinct behaviors that can introduce access control weaknesses:","Incomplete","Pillar","Simple",false,[],{"title":74,"metaDescription":75,"keywords":76,"canonicalUrl":77,"structuredData":78},"What is CVE-2023-22920? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-22920, a critical severity cyber security vulnerability from 2023. A security misconfiguration vulnerability exists in the...","CVE-2023-22920, CVE-2023-22920 vulnerability, CVE-2023-22920 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, zyxel security, lte3202-m437_firmware vulnerability, lte3202-m437 vulnerability, lte3316-m604_firmware vulnerability, lte3316-m604 vulnerability","\u002Fwhat-is\u002Fcve-2023-22920",{"@context":79,"@type":80,"headline":74,"description":75,"datePublished":10,"dateModified":11,"author":81,"publisher":85,"about":89,"mainEntityOfPage":93,"articleSection":96,"keywords":97},"https:\u002F\u002Fschema.org","TechArticle",{"@type":82,"name":83,"url":84},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":82,"name":83,"url":84,"logo":86},{"@type":87,"url":88},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":90,"name":6,"description":91,"additionalType":92},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":94,"@id":95},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-22920","Cybersecurity","CVE-2023-22920, CVE-2023-22920 vulnerability, CVE-2023-22920 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[99,111],{"Operator":100,"Negate":27,"Nodes":101},"AND",[102,107],{"Operator":103,"Negate":27,"CPEMatch":104},"OR",[105],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":106,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"ACA056DF-42B9-4530-9076-F5BAE33E4849",{"Operator":103,"Negate":27,"CPEMatch":108},[109],{"Vulnerable":27,"Criteria":46,"MatchCriteriaID":110,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"9AFA5A91-B372-464B-9C8E-DFC6552E64EB",{"Operator":100,"Negate":27,"Nodes":112},[113,117],{"Operator":103,"Negate":27,"CPEMatch":114},[115],{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":116,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"9D8CE2DA-94BB-4263-B0FD-02AB3ECA8858",{"Operator":103,"Negate":27,"CPEMatch":118},[119],{"Vulnerable":27,"Criteria":53,"MatchCriteriaID":120,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"557BE1D0-A562-4176-8E59-562E329DD602",[],[],{"lastModified":11,"cacheTime":124,"version":125},1792381857181,"2.0",{"score":127,"band":128,"action":129,"scoredAt":130},54,"Medium","Plan remediation","2026-10-16T06:57:12.185611+00:00"]