CVE-2024-22064 - CVE House
Back to Database
Status published High CVE-2024-22064

Configuration error Vulnerability in ZTE ZXUN-ePDG

Vulnerability Description

ZTE ZXUN-ePDG product, which serves as the network node of the VoWifi system, under by default configuration, uses a set of non-unique cryptographic keys during establishing a secure connection(IKE) with the mobile devices connecting over the internet . If the set of keys are leaked or cracked, the user session informations using the keys may be leaked.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-22064

Credits & Attribution

No credits recorded in the NVD database.

References

More from ZTE

View All →
CVE-2025-66315
ZTE MF258K Pro Version Server has a Configuration Defect Vulnerability
Medium 4.3
CVE-2025-66314
Improper Privilege Management vulnerability in ZTE ElasticNet UME R32 on...
High 7.5
CVE-2025-46583
DOS Vulnerability in ZTE MC889A Pro product
Medium 5.3
CVE-2025-46582
Private Key Disclosure Vulnerability in ZTE ZXMP M721 Product
High 7.7
CVE-2025-46581
ZTE ZXCDN product has a Struts RCE Vulnerability
Critical 9.8

Affected Vendor

Affected Software

ZXUN-ePDG
Vulnerable Versions:
V5.20.15

Timeline

Official Publish: May 10th, 2024
Last Modified: August 1st, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Weaknesses (CWE)

CWE-1051

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.