16 matches found
EUVD-2019-13050
Malware in sbrugna...
EUVD-2019-13051
Malware in sbrugna...
CVE-2019-3412
All versions up to BDR218V2.4 of ZTE MF920 product are impacted by command execution vulnerability. Due to some interfaces do not adequately verify parameters, an attacker can execute arbitrary commands through specific interfaces...
CVE-2019-3412
All versions up to BDR218V2.4 of ZTE MF920 product are impacted by command execution vulnerability. Due to some interfaces do not adequately verify parameters, an attacker can execute arbitrary commands through specific interfaces...
CVE-2019-3411
All versions up to BDR218V2.4 of ZTE MF920 product are impacted by information leak vulnerability. Due to some interfaces can obtain the WebUI login password without login, an attacker can exploit the vulnerability to obtain sensitive information about the affected components...
CVE-2019-3411
All versions up to BDR218V2.4 of ZTE MF920 product are impacted by information leak vulnerability. Due to some interfaces can obtain the WebUI login password without login, an attacker can exploit the vulnerability to obtain sensitive information about the affected components...
Command injection
All versions up to BDR218V2.4 of ZTE MF920 product are impacted by command execution vulnerability. Due to some interfaces do not adequately verify parameters, an attacker can execute arbitrary commands through specific interfaces...
Information disclosure
All versions up to BDR218V2.4 of ZTE MF920 product are impacted by information leak vulnerability. Due to some interfaces can obtain the WebUI login password without login, an attacker can exploit the vulnerability to obtain sensitive information about the affected components...
CVE-2019-3412
All versions up to BDR218V2.4 of ZTE MF920 product are impacted by command execution vulnerability. Due to some interfaces do not adequately verify parameters, an attacker can execute arbitrary commands through specific interfaces...
CVE-2019-3412
CVE-2019-3412 affects ZTE MF920 devices (BD_R218V2.4 and earlier). The root cause is that certain interfaces do not adequately validate parameters, enabling arbitrary command execution via those interfaces. Public documents consistently describe a pre-existing command-execution vulnerability in M...
CVE-2019-3411
All versions up to BDR218V2.4 of ZTE MF920 product are impacted by information leak vulnerability. Due to some interfaces can obtain the WebUI login password without login, an attacker can exploit the vulnerability to obtain sensitive information about the affected components...
CVE-2019-3411
CVE-2019-3411 affects ZTE MF920 routers (BD_R218V2.4 and earlier). An information-leak exists where certain interfaces can disclose the WebUI login password without authentication, enabling an attacker to obtain sensitive component data. Public materials in connected documents describe post-authe...
PT-2019-16564
Name of the Vulnerable Software and Affected Versions ZTE MF920 versions prior to BD R218V2.4 Description The issue is related to command execution due to inadequate parameter verification in certain interfaces, allowing an attacker to execute arbitrary commands through specific interfaces...
CVE-2019-3412: Improper Neutralization of Special Elements used in an OS Command
All versions up to BDR218V2.4 of ZTE MF920 product are impacted by command execution vulnerability. Due to some interfaces do not adequately verify parameters, an attacker can execute arbitrary commands through specific interfaces...
PT-2019-16563
Name of the Vulnerable Software and Affected Versions ZTE MF920 versions up to BD R218V2.4 Description The issue allows an attacker to obtain sensitive information about the affected components due to certain interfaces being able to obtain the WebUI login password without requiring a login. This...
CVE-2019-3411: Missing Authentication for Critical Function
All versions up to BDR218V2.4 of ZTE MF920 product are impacted by information leak vulnerability. Due to some interfaces can obtain the WebUI login password without login, an attacker can exploit the vulnerability to obtain sensitive information about the affected components...