Read the docs

ZTE

Records225All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical32CVSS 9.0–10.0
CVSS high86CVSS 7.0–8.9

Exploited now

ZTE records in CISA KEV

No ZTE vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Zxcloud Irai 13 records MEDIUM Zxv10 W300 Firmware 8 records MEDIUM Mf971r Firmware 7 records MEDIUM Zxcloud Goldendb 7 records LOW Zxhn F670 Firmware 7 records MEDIUM Mf286r Firmware 6 records MEDIUM Zxhn H108n R1a Firmware 6 records MEDIUM Goldendb 5 records LOW

Records

6 records in Mf286r Firmware · all components

TI-2022-18458 CVE-2022-39066 · GHSA-2m5w-88gg-379g

SQL injection in MF286R

Priority MEDIUM 62

There is a SQL injection vulnerability in ZTE MF286R.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.26542 Published 2022-11-22 No fix listed CWE-89
TI-2022-18465 CVE-2022-39073 · GHSA-x7rx-9g3w-62mw

Command injection in MF286R

Priority MEDIUM 55

There is a command injection vulnerability in ZTE MF286R, Due to insufficient validation of the input parameters, an attacker could use the vulnerability to execute arbitrary commands.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03426 Published 2023-01-06 No fix listed CWE-77
TI-2022-18459 CVE-2022-39067 · GHSA-wr28-mqhp-8rvc

Buffer overflow in MF286R

Priority LOW 30

There is a buffer overflow vulnerability in ZTE MF286R.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00663 Published 2022-11-22 No fix listed CWE-120
TI-2022-18464 CVE-2022-39072 · GHSA-74m9-g2cj-84jp

SQL injection in MF286R,MF289D

Priority LOW 24

There is a SQL injection vulnerability in Some ZTE Mobile Internet products.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00361 Published 2023-01-06 No fix listed CWE-89
Open these records in search →