zte Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/zte/ Sun, 26 Feb 2023 06:51:02 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png zte Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/zte/ 32 32 CVE-2018-7363 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7363/ Sun, 26 Feb 2023 06:51:02 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7363/ All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper authorization vulnerability. Since appviahttp service has no authorization delay, an attacker can be allowed to brute force account credentials.

The post CVE-2018-7363 appeared first on CVE Vulnerability.

]]> All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper authorization vulnerability. Since appviahttp service has no authorization delay, an attacker can be allowed to brute force account credentials.

The post CVE-2018-7363 appeared first on CVE Vulnerability.

]]> CVE-2018-7362 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7362/ Sun, 26 Feb 2023 06:51:02 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7362/ All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper access control vulnerability, which may allows an unauthorized user to perform unauthorized operations on the router.

The post CVE-2018-7362 appeared first on CVE Vulnerability.

]]> All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper access control vulnerability, which may allows an unauthorized user to perform unauthorized operations on the router.

The post CVE-2018-7362 appeared first on CVE Vulnerability.

]]> CVE-2018-7361 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7361/ Sun, 26 Feb 2023 06:51:02 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7361/ All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by null pointer dereference vulnerability, which may allows an attacker to cause a denial of service via appviahttp service.

The post CVE-2018-7361 appeared first on CVE Vulnerability.

]]> All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by null pointer dereference vulnerability, which may allows an attacker to cause a denial of service via appviahttp service.

The post CVE-2018-7361 appeared first on CVE Vulnerability.

]]> CVE-2018-7360 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7360/ Sun, 26 Feb 2023 06:51:02 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7360/ All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by information exposure vulnerability, which may allow an unauthenticated attacker to get the GPON SN information via appviahttp service.

The post CVE-2018-7360 appeared first on CVE Vulnerability.

]]> All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by information exposure vulnerability, which may allow an unauthenticated attacker to get the GPON SN information via appviahttp service.

The post CVE-2018-7360 appeared first on CVE Vulnerability.

]]> CVE-2018-7359 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7359/ Sun, 26 Feb 2023 06:51:02 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7359/ All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by heap-based buffer overflow vulnerability, which may allow an attacker to execute arbitrary code.

The post CVE-2018-7359 appeared first on CVE Vulnerability.

]]> All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by heap-based buffer overflow vulnerability, which may allow an attacker to execute arbitrary code.

The post CVE-2018-7359 appeared first on CVE Vulnerability.

]]> CVE-2019-3418 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-3418/ Sun, 26 Feb 2023 06:33:08 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-3418/ All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by cross-site scripting vulnerability (XSS). Due to incomplete input validation, an authorized user can exploit this vulnerability to execute malicious scripts.

The post CVE-2019-3418 appeared first on CVE Vulnerability.

]]> All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by cross-site scripting vulnerability (XSS). Due to incomplete input validation, an authorized user can exploit this vulnerability to execute malicious scripts.

The post CVE-2019-3418 appeared first on CVE Vulnerability.

]]> CVE-2019-3428 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-3428/ Sun, 26 Feb 2023 06:33:08 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-3428/ The version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a configuration error vulnerability. An attacker could directly access the management portal in HTTP, resulting in users’ information leakage.

The post CVE-2019-3428 appeared first on CVE Vulnerability.

]]> The version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a configuration error vulnerability. An attacker could directly access the management portal in HTTP, resulting in users’ information leakage.

The post CVE-2019-3428 appeared first on CVE Vulnerability.

]]> CVE-2019-3427 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-3427/ Sun, 26 Feb 2023 06:33:08 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-3427/ The version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a code injection vulnerability. An attacker could exploit the vulnerability to inject malicious code into the management page, resulting in users’ information leakage.

The post CVE-2019-3427 appeared first on CVE Vulnerability.

]]> The version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a code injection vulnerability. An attacker could exploit the vulnerability to inject malicious code into the management page, resulting in users’ information leakage.

The post CVE-2019-3427 appeared first on CVE Vulnerability.

]]> CVE-2019-3426 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-3426/ Sun, 26 Feb 2023 06:33:08 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-3426/ The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by the input validation vulnerability. An attacker could exploit this vulnerability for unauthorized operations.

The post CVE-2019-3426 appeared first on CVE Vulnerability.

]]> The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by the input validation vulnerability. An attacker could exploit this vulnerability for unauthorized operations.

The post CVE-2019-3426 appeared first on CVE Vulnerability.

]]> CVE-2019-3425 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-3425/ Sun, 26 Feb 2023 06:33:08 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-3425/ The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by vulnerability of permission and access control. An attacker could exploit this vulnerability to directly reset or change passwords of other accounts.

The post CVE-2019-3425 appeared first on CVE Vulnerability.

]]> The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by vulnerability of permission and access control. An attacker could exploit this vulnerability to directly reset or change passwords of other accounts.

The post CVE-2019-3425 appeared first on CVE Vulnerability.

]]>