CVE-2019-3412

All versions up to BDR218V2.4 of ZTE MF920 product are impacted by command execution vulnerability. Due to some interfaces do not adequately verify parameters, an attacker can execute arbitrary commands through specific interfaces...

CVE-2019-3412

CVE-2019-3412 affects ZTE MF920 devices (BD_R218V2.4 and earlier). The root cause is that certain interfaces do not adequately validate parameters, enabling arbitrary command execution via those interfaces. Public documents consistently describe a pre-existing command-execution vulnerability in M...