EUVD-2014-4086

Malware in sbrugna...

EUVD-2019-13055

Malware in sbrugna...

ZTE ZXV10 H201L - RCE via authentication bypass

Exploit Title: ZTE ZXV10 H201L - RCE via authentication bypass Exploit Author: l34n tasos meletlidis https://i0.rs/blog/finding-0click-rce-on-two-zte-routers/ import http.client, requests, os, argparse, struct, zlib from io import BytesIO from os import stat from Crypto.Cipher import AES def...

CVE-2024-22069: Improper Privilege Management

There is a permission and access control vulnerability of ZTE's ZXV10 XT802/ET301 product.Attackers with common permissions can log in the terminal web and change the password of the administrator illegally by intercepting requests to change the passwords...

PT-2021-14748

Name of the Vulnerable Software and Affected Versions ZTE ZXV10 B860H versions V5.0, V83011303.0010, V83011303.0016 Description A smart STB product of ZTE is impacted by a permission and access control issue. Due to insufficient protection of system application, attackers could use this issue to...

ZXV10 B860H 安全漏洞

The ZTE ZXV10 B860H is a network set-top box from China's ZTE Corporation ZTE. A security vulnerability exists in the ZXV10 B860H, which can be exploited by an attacker due to insufficient protection of system applications may be exploited to tamper with the system desktop and affect system...

Improper access control

ZTE ZXV10 W300 router with firmware W300V1.0.0aZRDLK stores sensitive information under the web root with insufficient access control, which allows remote attackers to read backup files via a direct request for rom-0...

CVE-2014-4019

ZTE ZXV10 W300 router with firmware W300V1.0.0aZRDLK stores sensitive information under the web root with insufficient access control, which allows remote attackers to read backup files via a direct request for rom-0...

PT-2020-7668

Name of the Vulnerable Software and Affected Versions ZTE ZXV10 W300 router version W300V1.0.0a ZRD LK Description The issue concerns the storage of sensitive information under the web root with insufficient access control. This allows remote attackers to read backup files by making a direct...

CVE-2014-4019: Exposure of Sensitive Information to an Unauthorized Actor

ZTE ZXV10 W300 router with firmware W300V1.0.0aZRDLK stores sensitive information under the web root with insufficient access control, which allows remote attackers to read backup files via a direct request for rom-0...

CVE-2019-3416

All versions up to V81511329.1008 of ZTE ZXV10 B860A products are impacted by input validation vulnerability. Due to input validation, unauthorized users can take advantage of this vulnerability to control the user terminal system...

CVE-2019-3416

All versions up to V81511329.1008 of ZTE ZXV10 B860A products are impacted by input validation vulnerability. Due to input validation, unauthorized users can take advantage of this vulnerability to control the user terminal system...

CVE-2019-3416

All versions up to V81511329.1008 of ZTE ZXV10 B860A products are impacted by input validation vulnerability. Due to input validation, unauthorized users can take advantage of this vulnerability to control the user terminal system...

PT-2019-16568

Name of the Vulnerable Software and Affected Versions ZTE ZXV10 B860A versions up to V81511329.1008 Description The issue is related to input validation, allowing unauthorized users to exploit it and control the user terminal system due to inadequate validation. Recommendations For versions up to...

CVE-2019-3416: Improper Input Validation

All versions up to V81511329.1008 of ZTE ZXV10 B860A products are impacted by input validation vulnerability. Due to input validation, unauthorized users can take advantage of this vulnerability to control the user terminal system...

CVE-2018-7366

ZTE ZXV10 B860AV2.1 product ChinaMobile branch with the ICNT versions up to V1.3.3, the BESTV versions up to V1.2.2, the WASU versions up to V1.1.7 and the MGTV versions up to V1.4.6 have an authentication bypass vulnerability, which may allows an unauthorized user to perform unauthorized...

CVE-2018-7366

ZTE ZXV10 B860AV2.1 product ChinaMobile branch with the ICNT versions up to V1.3.3, the BESTV versions up to V1.2.2, the WASU versions up to V1.1.7 and the MGTV versions up to V1.4.6 have an authentication bypass vulnerability, which may allows an unauthorized user to perform unauthorized...

CVE-2018-7366

ZTE ZXV10 B860AV2.1 product ChinaMobile branch with the ICNT versions up to V1.3.3, the BESTV versions up to V1.2.2, the WASU versions up to V1.1.7 and the MGTV versions up to V1.4.6 have an authentication bypass vulnerability, which may allows an unauthorized user to perform unauthorized...

PT-2018-18053

Name of the Vulnerable Software and Affected Versions ZTE ZXV10 B860AV2.1 product ChinaMobile branch with the ICNT versions up to V1.3.3 ZTE ZXV10 B860AV2.1 product ChinaMobile branch with the BESTV versions up to V1.2.2 ZTE ZXV10 B860AV2.1 product ChinaMobile branch with the WASU versions up to...

CVE-2018-7366: Incorrect Authorization

ZTE ZXV10 B860AV2.1 product ChinaMobile branch with the ICNT versions up to V1.3.3, the BESTV versions up to V1.2.2, the WASU versions up to V1.1.7 and the MGTV versions up to V1.4.6 have an authentication bypass vulnerability, which may allows an unauthorized user to perform unauthorized...