CVE-2019-3428

The version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a configuration error vulnerability. An attacker could directly access the management portal in HTTP, resulting in users’ information leakage...

CVE-2019-3428

CVE-2019-3428 affects ZTE ZXCDN IAMWEB v6.01.03.01. The issue is a configuration error that allows an attacker to directly access the management portal over HTTP, resulting in users’ information leakage. The available documents consistently describe a misconfiguration leading to exposure of manag...

CVE-2019-3427

The version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a code injection vulnerability. An attacker could exploit the vulnerability to inject malicious code into the management page, resulting in users’ information leakage...

CVE-2019-3427

CVE-2019-3427 affects ZTE ZXCDN IAMWEB 6.01.03.01. A code injection vulnerability allows an attacker to inject malicious code into the management page, causing users’ information leakage. Root cause cited as improper filtering of external input during code segment construction. Public sources (NV...

ZTE C520V21 Privilege Permission and Access Control Error Vulnerability

The ZTE C520V21 is a smart webcam from China's ZTE Corporation ZTE. A Permission Permission and Access Control Error vulnerability exists in the ZTE C520V21 version 2.1.14 and earlier versions, which can be exploited by an attacker to access other unauthorized files or resources by creating a URL...

ZTE C520V21 Authentication Error Vulnerability

The ZTE C520V21 is a smart webcam from China's ZTE Corporation ZTE. An authentication error vulnerability exists in the ZTE C520V21 version 2.1.14 and earlier versions, which can be exploited by an attacker to access web services in an authorized browser and perform operations...

CVE-2019-3420

All versions up to V2.5.0EG1T5TED of ZTE ZXHN H108N product are impacted by an information leak vulnerability. An attacker could exploit the vulnerability to obtain sensitive information and perform unauthorized operations...

Information disclosure

All versions up to V2.5.0EG1T5TED of ZTE ZXHN H108N product are impacted by an information leak vulnerability. An attacker could exploit the vulnerability to obtain sensitive information and perform unauthorized operations...

CVE-2019-3420

All versions up to V2.5.0EG1T5TED of ZTE ZXHN H108N product are impacted by an information leak vulnerability. An attacker could exploit the vulnerability to obtain sensitive information and perform unauthorized operations...

CVE-2019-3420

CVE-2019-3420 affects ZTE ZXHN H108N modems up to firmware version 2.5.0_EG1T5_TED. The vulnerability is described as an information disclosure bug that could allow an attacker to obtain sensitive information and perform unauthorized operations. Related entries across multiple feeds (NVD, Red Hat...

ZTE MF910S Information Disclosure Vulnerability

The ZTE MF910S is a portable 4G wireless router from China's ZTE ZTE. An information disclosure vulnerability exists in the ZTE MF910S. The vulnerability stems from errors such as configuration during operation of a network system or product. An unauthorized attacker could exploit the vulnerabili...

CVE-2019-3426

The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by the input validation vulnerability. An attacker could exploit this vulnerability for unauthorized operations...

CVE-2019-3425

The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by vulnerability of permission and access control. An attacker could exploit this vulnerability to directly reset or change passwords of other accounts...

CVE-2019-3426

The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by the input validation vulnerability. An attacker could exploit this vulnerability for unauthorized operations...

CVE-2019-3425

The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by vulnerability of permission and access control. An attacker could exploit this vulnerability to directly reset or change passwords of other accounts...

Input validation

The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by the input validation vulnerability. An attacker could exploit this vulnerability for unauthorized operations...

CVE-2019-3426

CVE-2019-3426 affects ZTE ZXUPN-9000E devices (9000EV5.0R1B12 and earlier). The issue is described as an input‑validation vulnerability that could allow an attacker to perform unauthorized operations. The linked records confirm affected product/version but do not provide concrete exploit details,...

CVE-2019-3426

The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by the input validation vulnerability. An attacker could exploit this vulnerability for unauthorized operations...

CVE-2019-3425

CVE-2019-3425 affects ZTE ZXUPN-9000E devices (9000EV5.0R1B12 and earlier). The vulnerability is a permission/access-control flaw in the 9000E platform that allows an attacker to directly reset or change passwords on other accounts. Connected documents corroborate the same issue across multiple s...

CVE-2019-3425

The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by vulnerability of permission and access control. An attacker could exploit this vulnerability to directly reset or change passwords of other accounts...