CVE-2019-3425

2019-11-0818:28:27

zte

www.cve.org

8.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

62.0%

JSON

The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by vulnerability of permission and access control. An attacker could exploit this vulnerability to directly reset or change passwords of other accounts.

CNA Affected

[
  {
    "product": "ZXUPN-9000E",
    "vendor": "ZTE Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "All versions up to 9000EV5.0R1B12"
      }
    ]
  }
]

References

support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011683