Is CVE-2022-39075 in the CISA KEV catalog?

No. CVE-2022-39075 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2022-39075?

CVE-2022-39075 has a CVSS v3 base score of 7.1 (HIGH).

What is the EPSS score for CVE-2022-39075?

CVE-2022-39075 has an EPSS score of 0.29% (21th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2022-39075?

Upgrade axon 40 ultra firmware to 1.0.0b26 or later. Fixes are available for 17 affected products.

CVE & CISA-KEV Catalog

CVE-2022-39075

HIGH

7.1

CVSS v3

NVD

Description

There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could delete some system files without user permission.

How to fix

Remediation Available

axon 40 ultra firmwareNVD

Affected:< 1.0.0b26Fixed in:1.0.0b26CVE-2022-39075derived from NVD

blade a31 firmwareNVD

Affected:< m03Fixed in:m03CVE-2022-39075derived from NVD

blade a31 plus firmwareNVD

Affected:< m04Fixed in:m04CVE-2022-39075derived from NVD

blade a3 lite firmwareNVD

Affected:< m09Fixed in:m09CVE-2022-39075derived from NVD

blade a51 firmwareNVD

Affected:< m07Fixed in:m07CVE-2022-39075derived from NVD

blade a52 firmwareNVD

Affected:< m02Fixed in:m02CVE-2022-39075derived from NVD

blade a5 2019 firmwareNVD

Affected:< m13Fixed in:m13CVE-2022-39075derived from NVD

blade a5 2020 firmwareNVD

Affected:< m05Fixed in:m05CVE-2022-39075derived from NVD

blade a71 firmwareNVD

Affected:< 2.4Fixed in:2.4CVE-2022-39075derived from NVD

blade a72 firmwareNVD

Affected:< 11.0.3Fixed in:11.0.3CVE-2022-39075derived from NVD

blade a7s firmwareNVD

Affected:< 2.2Fixed in:2.2CVE-2022-39075derived from NVD

blade l210 firmwareNVD

Affected:< 1.14Fixed in:1.14CVE-2022-39075derived from NVD

blade v20 smart firmwareNVD

Affected:< 1.14Fixed in:1.14CVE-2022-39075derived from NVD

blade v30 firmwareNVD

Affected:< 1.11Fixed in:1.11CVE-2022-39075derived from NVD

blade v30 vita firmwareNVD

Affected:< 1.11Fixed in:1.11CVE-2022-39075derived from NVD

blade v40 vita firmwareNVD

Affected:< 11.0.2_8045Fixed in:11.0.2_8045CVE-2022-39075derived from NVD

v40 pro firmwareNVD

Affected:< 11.0.4_9046Fixed in:11.0.4_9046CVE-2022-39075derived from NVD

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges RequiredNone

User InteractionRequired

ScopeUnchanged

Impact

ConfidentialityNone

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Exploit Intelligence

0.29%probability of exploitation in 30 days

21stpercentile

Low risk: more likely to be exploited than 21% of all known CVEs.

References

Vendor Advisory1

support.zte.com.cn

Embed a live status badge for CVE-2022-39075

Markdown

[![CVE-2022-39075](https://tridentstack.com/cve/badge/CVE-2022-39075.svg)](https://tridentstack.com/cve/CVE-2022-39075)

HTML

<a href="https://tridentstack.com/cve/CVE-2022-39075"><img src="https://tridentstack.com/cve/badge/CVE-2022-39075.svg" alt="CVE-2022-39075"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2025-01-13.