EUVD-2019-13054

Malware in sbrugna...

CVE-2019-3415

ZTE MW NR8000V2.4.4.03 and NR8000V2.4.4.04 are impacted by path traversal vulnerability. Due to path traversal,users can download any files...

ZTE ZXMW NR8000 Path Traversal Vulnerability

The ZTE ZXMW NR8000 is a trunked radio from China's ZTE Corporation ZTE. A path traversal vulnerability exists in the ZTE ZXMW NR8000 version V2.4.4.03 and V2.4.4.04. The vulnerability stems from a failure of a network system or product to properly filter special elements in the path of a resourc...

PT-2019-16567

Name of the Vulnerable Software and Affected Versions ZTE MW versions NR8000V2.4.4.03 through NR8000V2.4.4.04 Description The issue allows users to download any files due to a path traversal vulnerability. Recommendations For versions NR8000V2.4.4.03 and NR8000V2.4.04, consider restricting file...

CVE-2019-3415: Improper Limitation of a Pathname to a Restricted Directory

ZTE MW NR8000V2.4.4.03 and NR8000V2.4.4.04 are impacted by path traversal vulnerability. Due to path traversal,users can download any files...

ZTE NR8000 Series Radio Relay System Java Object Deserialization RCE

The vulnerability of ZTE NR8000 series radio relay system microprogramming software is related to the process of deserializing Java objects when processing requests via the Java RMI Remote Method Invocation service, using the Apache Commons Collections ACC library. Exploiting this vulnerability...

ZTE Microwave NR8000 Series Product Remote Code Execution Vulnerability

ZTE Microwave NR8120 and others are microwave transmission solutions from China's ZTE Corporation ZTE. A security vulnerability exists in the ZTE Microwave NR8000 series products. A remote attacker can exploit the vulnerability by sending a specially crafted RMI request to execute arbitrary code ...

CVE-2017-10932

All versions prior to V12.17.20 of the ZTE Microwave NR8000 series products - NR8120, NR8120A, NR8120, NR8150, NR8250, NR8000 TR and NR8950 are the applications of C/S architecture using the Java RMI service in which the servers use the Apache Commons Collections ACC library that may result in Ja...

Deserialization of untrusted data

All versions prior to V12.17.20 of the ZTE Microwave NR8000 series products - NR8120, NR8120A, NR8120, NR8150, NR8250, NR8000 TR and NR8950 are the applications of C/S architecture using the Java RMI service in which the servers use the Apache Commons Collections ACC library that may result in Ja...

CVE-2017-10932

All versions prior to V12.17.20 of the ZTE Microwave NR8000 series products - NR8120, NR8120A, NR8120, NR8150, NR8250, NR8000 TR and NR8950 are the applications of C/S architecture using the Java RMI service in which the servers use the Apache Commons Collections ACC library that may result in Ja...

CVE-2017-10932: Deserialization of Untrusted Data

All versions prior to V12.17.20 of the ZTE Microwave NR8000 series products - NR8120, NR8120A, NR8120, NR8150, NR8250, NR8000 TR and NR8950 are the applications of C/S architecture using the Java RMI service in which the servers use the Apache Commons Collections ACC library that may result in Ja...

CVE-2017-10932

All versions prior to V12.17.20 of the ZTE Microwave NR8000 series products - NR8120, NR8120A, NR8120, NR8150, NR8250, NR8000 TR and NR8950 are the applications of C/S architecture using the Java RMI service in which the servers use the Apache Commons Collections ACC library that may result in Ja...

CVE-2017-10932

ZTE Microwave NR8000 series (NR8120/NR8120A/NR8120/NR8150/NR8250/NR8000 TR/NR8950) versions before V12.17.20 are affected. The devices use a C/S architecture with a Java RMI service whose servers rely on the Apache Commons Collections library, enabling Java deserialization vulnerabilities. An una...

PT-2017-2980

Name of the Vulnerable Software and Affected Versions ZTE Microwave NR8000 series products versions prior to V12.17.20 Description The issue is related to Java deserialization vulnerabilities in the ZTE Microwave NR8000 series products, specifically in the applications of C/S architecture using t...