Command Execution Vulnerability in ZXV10 M910 Conference Management System

ZTE Corporation is a leading global provider of integrated communications solutions. A command execution vulnerability exists in the ZXV10 M910 conference management system, which can be exploited by an attack to gain server control privileges...

Logic Flaw Vulnerability in ZXHN F450A

ZTE Corporation is a leading global provider of integrated communications solutions. Its main products include 2G/3G/4G/5G wireless base stations and core networks, IMS, fixed-line access and bearer, optical networks, chipsets, high-end routers, smart switches, government and enterprise networks,...

Weak Password Vulnerability in ZTE Corporation F600W

F600W is a router from ZTE Corporation. A weak password vulnerability exists in the ZTE Corporation F600W, which can be exploited by an attacker to obtain sensitive information...

Arbitrary File Read Vulnerability in ZXV10 W815N at ZTE CORPORATION

The ZXV10 W815N is a wireless router from ZTE Corporation. The ZXV10 W815N from ZTE Corporation suffers from an arbitrary file read vulnerability that can be exploited by an attacker to obtain sensitive information...

ZTE Corporation ZTE ZXR10 1800-2S suffers from a weak password vulnerability

ZTE ZXR10 1800-2S is a router from ZTE Corporation. A weak password vulnerability exists in the ZTE ZXR10 1800-2S from ZTE Corporation, which can be exploited by an attacker to obtain sensitive information...

Weak Password Vulnerability in ZXV10 W815N at ZTE CORPORATION

The ZXV10 W815N is a wireless router from ZTE Corporation. The ZXV10 W815N from ZTE Corporation suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

Weak Password Vulnerability in ZXHN E5500 of ZTE CORPORATION

ZXHN E5500 is a router from ZTE Corporation. A weak password vulnerability exists in the ZXHN E5500 of ZTE Corporation, which can be exploited by an attacker to obtain sensitive information...

CVE-2021-21730

A ZTE product is impacted by improper access control vulnerability. The attacker could exploit this vulnerability to access CLI by brute force attacks.This affects: ZXHN H168N V3.5.0TY.T6...

CVE-2021-21729

Some ZTE products have CSRF vulnerability. Because some pages lack CSRF random value verification, attackers could perform illegal authorization operations by constructing messages.This affects: ZXHN H168N V3.5.0EG1T5TE, V2.5.5, ZXHN H108N V2.5.5BTMT1...

CVE-2021-21730

A ZTE product is impacted by improper access control vulnerability. The attacker could exploit this vulnerability to access CLI by brute force attacks.This affects: ZXHN H168N V3.5.0TY.T6...

CVE-2021-21731

A CSRF vulnerability exists in the management page of a ZTE product.The vulnerability is caused because the management page does not fully verify whether the request comes from a trusted user. The attacker could submit a malicious request to the affected device to delete the data. This affects:...

Cross site request forgery (csrf)

A CSRF vulnerability exists in the management page of a ZTE product.The vulnerability is caused because the management page does not fully verify whether the request comes from a trusted user. The attacker could submit a malicious request to the affected device to delete the data. This affects:...

Improper access control

A ZTE product is impacted by improper access control vulnerability. The attacker could exploit this vulnerability to access CLI by brute force attacks.This affects: ZXHN H168N V3.5.0TY.T6...

Cross site request forgery (csrf)

Some ZTE products have CSRF vulnerability. Because some pages lack CSRF random value verification, attackers could perform illegal authorization operations by constructing messages.This affects: ZXHN H168N V3.5.0EG1T5TE, V2.5.5, ZXHN H108N V2.5.5BTMT1...

CVE-2021-21729

The CVE-2021-21729 entry describes a CSRF vulnerability in ZTE router models ZXHN H168N (V3.5.0_EG1T5_TE, V2.5.5) and ZXHN H108N (V2.5.5_BTMT1). Root cause: pages lack CSRF random value verification, enabling an attacker to perform unauthorized operations by crafting messages. Affected products a...

CVE-2021-21729

Some ZTE products have CSRF vulnerability. Because some pages lack CSRF random value verification, attackers could perform illegal authorization operations by constructing messages.This affects: ZXHN H168N V3.5.0EG1T5TE, V2.5.5, ZXHN H108N V2.5.5BTMT1...

CVE-2021-21730

CVE-2021-21730 affects ZTE ZXHN H168N with firmware/variant V3.5.0_TY.T6. The vulnerability is described as an improper access control that enables brute-force attempts to access the device’s CLI. Public sources in the connected set confirm the affected product and the attack vector (network) wit...

CVE-2021-21730

A ZTE product is impacted by improper access control vulnerability. The attacker could exploit this vulnerability to access CLI by brute force attacks.This affects: ZXHN H168N V3.5.0TY.T6...

CVE-2021-21731

A CSRF vulnerability exists in the management page of a ZTE product.The vulnerability is caused because the management page does not fully verify whether the request comes from a trusted user. The attacker could submit a malicious request to the affected device to delete the data. This affects:...

CVE-2021-21731

The CVE-2021-21731 issue is a CSRF vulnerability in the ZTE ZXCLOUD iRAI management page. The root cause is insufficient verification of request origins, allowing an attacker to submit malicious requests that can delete data on the affected device. Affected products/versions: ZXCLOUD iRAI prior t...