Read the docs

ZTE

Records225All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical32CVSS 9.0–10.0
CVSS high86CVSS 7.0–8.9

Exploited now

ZTE records in CISA KEV

No ZTE vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Zxcloud Irai 13 records MEDIUM Zxv10 W300 Firmware 8 records MEDIUM Mf971r Firmware 7 records MEDIUM Zxcloud Goldendb 7 records LOW Zxhn F670 Firmware 7 records MEDIUM Mf286r Firmware 6 records MEDIUM Zxhn H108n R1a Firmware 6 records MEDIUM Goldendb 5 records LOW

Records

7 records in Zxhn F670 Firmware · all components

TI-2018-05335 CVE-2018-7359 · GHSA-4xfr-6c87-7vmj

Out-of-bounds write in ZTE ZXHN F670

Priority MEDIUM 46

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by heap-based buffer overflow vulnerability, which may allow an attacker to execute arbitrary code.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01861 Published 2018-11-16 No fix listed CWE-787
TI-2018-05336 CVE-2018-7360 · GHSA-qv22-489q-gqxm

Information disclosure in ZTE ZXHN F670

Priority MEDIUM 43

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by information exposure vulnerability, which may allow an unauthenticated attacker to get the GPON SN information via appviahttp service.

CVSS 3.0CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.00996 Published 2018-11-16 No fix listed CWE-200
TI-2019-02572 CVE-2019-3417 · GHSA-c6hf-65vv-x432

OS command injection in ZTE ZXHN F670

Priority MEDIUM 42

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by command injection vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01859 Published 2019-08-15 No fix listed CWE-78
TI-2018-05339 CVE-2018-7363 · GHSA-p3r7-5q3h-8vc9

Incorrect authorization in ZTE ZXHN F670

Priority MEDIUM 40

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper authorization vulnerability.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00878 Published 2018-11-16 No fix listed CWE-863
TI-2018-05338 CVE-2018-7362 · GHSA-m8x3-h4fm-hpp2

Improper access control in ZTE ZXHN F670

Priority MEDIUM 40

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper access control vulnerability, which may allows an unauthorized user to perform unauthorized operations on the router.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01197 Published 2018-11-16 No fix listed CWE-284
TI-2018-05337 CVE-2018-7361 · GHSA-vq42-379v-g652

NULL pointer dereference in ZTE ZXHN F670

Priority LOW 30

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by null pointer dereference vulnerability, which may allows an attacker to cause a denial of service via appviahttp service.

CVSS 3.0MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00824 Published 2018-11-16 No fix listed CWE-476
TI-2019-02573 CVE-2019-3418 · GHSA-q8gp-xv3x-qfpx

Cross-site scripting in ZTE ZXHN F670

Priority LOW 26

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by cross-site scripting vulnerability (XSS).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00716 Published 2019-08-15 No fix listed CWE-79
Open these records in search →