ZTE WF820+ LTE Outdoor CPE Command Injection Vulnerability

The ZTE WF820+ LTE Outdoor CPE is an outdoor CPE Customer Premise Equipment device from ZTE China. A command injection vulnerability exists in the ZTE WF820+ LTE Outdoor CPE UKBBWF820+1.0.0B06 prior version, which originates from a network system or product not properly filtering specific element...

CVE-2019-3409

All versions up to UKBBWF820+1.0.0B06 of ZTE WF820+ LTE Outdoor CPE product are impacted by command injection vulnerability. Due to inadequate parameter verification, unauthorized users can take advantage of this vulnerability to control the user terminal system...

Cross site request forgery (csrf)

All versions up to UKBBWF820+1.0.0B06 of ZTE WF820+ LTE Outdoor CPE product are impacted by Cross-Site Request Forgery vulnerability,which stems from the fact that WEB applications do not adequately verify whether requests come from trusted users. An attacker can exploit this vulnerability to sen...

CVE-2019-3410

All versions up to UKBBWF820+1.0.0B06 of ZTE WF820+ LTE Outdoor CPE product are impacted by Cross-Site Request Forgery vulnerability,which stems from the fact that WEB applications do not adequately verify whether requests come from trusted users. An attacker can exploit this vulnerability to sen...