Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Zteusa Clear all filters
TI-2018-10812 CVE-2018-15006 · GHSA-c25x-r4m5-7vg8

The ZTE ZMAX Champ Android device with a build fingerprint of…

Priority LOW 26

The ZTE ZMAX Champ Android device with a build fingerprint of ZTE/Z917VL/fortune:6.0.1/MMB29M/20170327.120922:user/release-keys contains a pre-installed platform app with a package name of com.android.zte.hiddenmenu (ver…

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00533 Published 2018-12-28 No fix listed
TI-2018-10811 CVE-2018-15005 · GHSA-44g8-6xxp-6ff2

The ZTE ZMAX Champ Android device with a build fingerprint of…

Priority LOW 32

The ZTE ZMAX Champ Android device with a build fingerprint of ZTE/Z917VL/fortune:6.0.1/MMB29M/20170327.120922:user/release-keys contains a pre-installed platform app with a package name of com.zte.zdm.sdm (versionCode=31…

CVSS 3.0HIGH 7.1 Local Low privileges No interaction EPSS 0.00473 Published 2018-12-28 No fix listed CWE-862
TI-2018-10801 CVE-2018-14995 · GHSA-mh7p-2p63-76h2

The ZTE Blade Vantage Android device with a build fingerprint of…

Priority LOW 22

The ZTE Blade Vantage Android device with a build fingerprint of ZTE/Z839/sweet:7.1.1/NMF26V/20180120.095344:user/release-keys, the ZTE Blade Spark Android device with a build fingerprint of ZTE/Z971/peony:7.1.1/NMF26V/2…

CVSS 3.0MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00415 Published 2018-12-28 No fix listed CWE-532
TI-2014-07347 CVE-2014-9021 · GHSA-mrg2-8f7m-jw7f

Multiple cross-site scripting (XSS) vulnerabilities in ZTE ZXDSL 831 allow remote…

Priority LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in ZTE ZXDSL 831 allow remote attackers to inject arbitrary web script or HTML via the (1) tr69cAcsURL, (2) tr69cAcsUser, (3) tr69cAcsPwd, (4) tr69cConnReqPwd, or (5) t…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01854 Published 2014-11-20 No fix listed CWE-79