CVE-2017-10935

All versions prior to ZSRV2 V3.00.40 of the ZTE ZXR10 1800-2S products allow remote authenticated users to bypass the original password authentication protection to change other user's password...

CVE-2017-10935

The CVE-2017-10935 vulnerability affects ZTE ZXR10 1800-2S with ZSRV2 firmware versions prior to V3.00.40. A remote authenticated attacker can bypass the original password authentication and change another user’s password, enabling account compromise. The risk is mitigated by upgrading to ZSRV2 V...