CVE Vulnerability

CVE-2019-3410

All versions up to UKBB_WF820+_1.0.0B06 of ZTE WF820+ LTE Outdoor CPE product are impacted by Cross-Site Request Forgery vulnerability,which stems from the fact that WEB applications do not adequately verify whether requests come from trusted users. An attacker can exploit this vulnerability to send unexpected requests to the server through the affected client.

6.8 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 6.4

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

Scope

8.8 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010662 Vendor Advisory
Configurations

Configuration 1
Information

Published : 2019-06-11 07:29

Updated : 2019-10-09 11:49

NVD link : CVE-2019-3410

Mitre link : CVE-2019-3410

Products Affected

Wf820+ Lte Outdoor Cpe

Wf820+ Lte Outdoor Cpe Firmware

Zte

CWE
CWE-352