Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: ZTE Component: Zxhn F670 Firmware Clear all filters
TI-2019-02573 CVE-2019-3418 · GHSA-q8gp-xv3x-qfpx

Cross-site scripting in ZTE ZXHN F670

Priority LOW 26

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by cross-site scripting vulnerability (XSS).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00716 Published 2019-08-15 No fix listed CWE-79
TI-2019-02572 CVE-2019-3417 · GHSA-c6hf-65vv-x432

OS command injection in ZTE ZXHN F670

Priority MEDIUM 42

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by command injection vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01859 Published 2019-08-15 No fix listed CWE-78
TI-2018-05339 CVE-2018-7363 · GHSA-p3r7-5q3h-8vc9

Incorrect authorization in ZTE ZXHN F670

Priority MEDIUM 40

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper authorization vulnerability.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00878 Published 2018-11-16 No fix listed CWE-863
TI-2018-05338 CVE-2018-7362 · GHSA-m8x3-h4fm-hpp2

Improper access control in ZTE ZXHN F670

Priority MEDIUM 40

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper access control vulnerability, which may allows an unauthorized user to perform unauthorized operations on the router.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01197 Published 2018-11-16 No fix listed CWE-284
TI-2018-05337 CVE-2018-7361 · GHSA-vq42-379v-g652

NULL pointer dereference in ZTE ZXHN F670

Priority LOW 30

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by null pointer dereference vulnerability, which may allows an attacker to cause a denial of service via appviahttp service.

CVSS 3.0MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00824 Published 2018-11-16 No fix listed CWE-476
TI-2018-05336 CVE-2018-7360 · GHSA-qv22-489q-gqxm

Information disclosure in ZTE ZXHN F670

Priority MEDIUM 43

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by information exposure vulnerability, which may allow an unauthenticated attacker to get the GPON SN information via appviahttp service.

CVSS 3.0CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.00996 Published 2018-11-16 No fix listed CWE-200
TI-2018-05335 CVE-2018-7359 · GHSA-4xfr-6c87-7vmj

Out-of-bounds write in ZTE ZXHN F670

Priority MEDIUM 46

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by heap-based buffer overflow vulnerability, which may allow an attacker to execute arbitrary code.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01861 Published 2018-11-16 No fix listed CWE-787