Lucene search

K
nvd[email protected]NVD:CVE-2019-3415
HistoryJul 11, 2019 - 9:15 p.m.

CVE-2019-3415

2019-07-1121:15:09
CWE-22
web.nvd.nist.gov
4

CVSS2

2.7

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:S/C:P/I:N/A:N

CVSS3

5.7

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

32.2%

ZTE MW NR8000V2.4.4.03 and NR8000V2.4.4.04 are impacted by path traversal vulnerability. Due to path traversal,users can download any files.

Affected configurations

Nvd
Node
ztezxmw_nr8000_firmwareMatch2.4.4.03
OR
ztezxmw_nr8000_firmwareMatch2.4.4.04
AND
ztezxmw_nr8000Match-
VendorProductVersionCPE
ztezxmw_nr8000_firmware2.4.4.03cpe:2.3:o:zte:zxmw_nr8000_firmware:2.4.4.03:*:*:*:*:*:*:*
ztezxmw_nr8000_firmware2.4.4.04cpe:2.3:o:zte:zxmw_nr8000_firmware:2.4.4.04:*:*:*:*:*:*:*
ztezxmw_nr8000-cpe:2.3:h:zte:zxmw_nr8000:-:*:*:*:*:*:*:*

CVSS2

2.7

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:S/C:P/I:N/A:N

CVSS3

5.7

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

32.2%

Related for NVD:CVE-2019-3415