CVE-2018-7366

🗓️ 28 Dec 2018 16:00:00Reported by zteType

ZTE ZXV10 B860AV2.1 product ChinaMobile branch with ICNT, BESTV, WASU, MGTV versions up to V1.3.3, V1.2.2, V1.1.7, V1.4.6 has an authentication bypass vulnerability allowing unauthorized operations

Reporter	Title	Published	Views	Family All 4
Cvelist	CVE-2018-7366	28 Dec 201816:00	–	cvelist
EUVD	EUVD-2018-19098	7 Oct 202500:30	–	euvd
NVD	CVE-2018-7366	28 Dec 201816:29	–	nvd
Prion	Authentication flaw	28 Dec 201816:29	–	prion

NVD

Node

zte zxv10_b860av2.1_chinamobile_firmwareRange<icnt_v1.3.3

AND

zte zxv10_b860av2.1_chinamobileMatch-

Node

zte zxv10_b860av2.1_chinamobile_firmwareRange<bestv_v1.2.2

AND

zte zxv10_b860av2.1_chinamobileMatch-

Node

zte zxv10_b860av2.1_chinamobile_firmwareRange<wasu_v1.1.7

AND

zte zxv10_b860av2.1_chinamobileMatch-

Node

zte zxv10_b860av2.1_chinamobile_firmwareRange<mgtv_v1.4.6

AND

zte zxv10_b860av2.1_chinamobileMatch-

[
  {
    "product": "ZXV10 B860AV2.1_ChinaMobile",
    "vendor": "ZTE",
    "versions": [
      {
        "lessThanOrEqual": "ICNT_V1.3.3",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "BESTV_V1.2.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "WASU_V1.1.7",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "MGTV_V1.4.6",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
support	www.support.zte.com.cn/support/news/LoopholeInfoDetail.aspx

21 Nov 2024 04:12Current

6.7Medium risk

Vulners AI Score6.7

CVSS 24.6

CVSS 34.3 - 6.8

EPSS0.0004

CWE-863