CVE-2019-3426

2019-11-0818:29:03

zte

www.cve.org

8.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.8%

JSON

The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by the input validation vulnerability. An attacker could exploit this vulnerability for unauthorized operations.

CNA Affected

[
  {
    "product": "ZXUPN-9000E",
    "vendor": "ZTE Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "All versions up to 9000EV5.0R1B12"
      }
    ]
  }
]

References

support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011683