Some ZTE products have CSRF vulnerability. Because some pages lack CSRF random value verification, attackers could perform illegal authorization operations by constructing messages.This affects: ZXHN H168N V3.5.0_EG1T5_TE, V2.5.5, ZXHN H108N V2.5.5_BTMT1
[
{
"product": "ZXHN H168N,ZXHN H108N",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "V3.5.0_EG1T5_TE"
},
{
"status": "affected",
"version": "V2.5.5_BTMT1"
}
]
}
]