ZTE

Records225All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical32CVSS 9.0–10.0

CVSS high86CVSS 7.0–8.9

Exploited now

ZTE records in CISA KEV

No ZTE vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Zxcloud Irai 13 records MEDIUM Zxv10 W300 Firmware 8 records MEDIUM Mf971r Firmware 7 records MEDIUM Zxcloud Goldendb 7 records LOW Zxhn F670 Firmware 7 records MEDIUM Mf286r Firmware 6 records MEDIUM Zxhn H108n R1a Firmware 6 records MEDIUM Goldendb 5 records LOW

Records

6 records in Zxhn H108n R1a Firmware · all components

TI-2015-06023 CVE-2015-7251 · GHSA-66hx-rffc-vqm5

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE have a hardcoded password of…

MEDIUM 55

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE have a hardcoded password of root for the root account, which allows remote attackers to obtain administrative access via a TELNET session.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.10675 Published 2015-12-30 No fix listed CWE-255

TI-2015-06022 CVE-2015-7250 · GHSA-fvr2-9cvw-2qwx

Absolute path traversal vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices…

MEDIUM 49

Absolute path traversal vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attackers to read arbitrary files via a full pathname in the getpage parameter.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.1554 Published 2015-12-30 No fix listed CWE-22

TI-2015-06020 CVE-2015-7248 · GHSA-63g3-7wjw-9cxg

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote attackers to…

MEDIUM 43

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote attackers to discover usernames and password hashes by reading the cgi-bin/webproc HTML source code, a different vulnerability than CVE-2015-8703.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.06897 Published 2015-12-30 No fix listed CWE-200

TI-2015-07154 CVE-2015-8703 · GHSA-8863-rmh9-4mvj

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE and ZXV10 W300 devices…

LOW 37

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE and ZXV10 W300 devices W300V1.0.0f_ER1_PE allow remote authenticated users to bypass intended access restrictions, and discover credentials and keys, by reading…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.04856 Published 2015-12-30 No fix listed CWE-200

TI-2015-06024 CVE-2015-7252 · GHSA-v877-jx8x-6qr4

Cross-site scripting (XSS) vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices…

LOW 32

Cross-site scripting (XSS) vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attackers to inject arbitrary web script or HTML via the errorpage parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02707 Published 2015-12-30 No fix listed CWE-79

TI-2015-06021 CVE-2015-7249 · GHSA-wrgw-4jfp-j4x5

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote authenticated…

LOW 31

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote authenticated users to bypass intended access restrictions via a modified request, as demonstrated by leveraging the support account to change a pa…

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.05534 Published 2015-12-30 No fix listed CWE-264

Open these records in search →