Input validation

All versions up to V81511329.1008 of ZTE ZXV10 B860A products are impacted by input validation vulnerability. Due to input validation, unauthorized users can take advantage of this vulnerability to control the user terminal system...

CVE-2019-3416

All versions up to V81511329.1008 of ZTE ZXV10 B860A products are impacted by input validation vulnerability. Due to input validation, unauthorized users can take advantage of this vulnerability to control the user terminal system...

CVE-2019-3416

CVE-2019-3416 affects all versions up to V81511329.1008 of the ZTE ZXV10 B860A (network set‑top box). The issue is an input validation error that can allow an unauthorized user to take control of the user terminal system. The connected documents confirm the affected product and root cause (input ...

NewStart CGSL MAIN 4.06 : bind Vulnerability (NS-SA-2019-0174)

The remote NewStart CGSL host, running version MAIN 4.06, has bind packages installed that are affected by a vulnerability: Note that Nessus has not tested for this issue but has instead relied only on the application's self- reported version number. %NASLMINLEVEL 70300 C Tenable Network Security...

ZTE ZXHN F670 Command Injection Vulnerability

The ZTE ZXHN F670 is a modem from China's ZTE Corporation ZTE. A command injection vulnerability exists in the ZTE ZXHN F670. An attacker can exploit this vulnerability to execute illegal commands...

CVE-2019-3418

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by cross-site scripting vulnerability XSS. Due to incomplete input validation, an authorized user can exploit this vulnerability to execute malicious scripts...

CVE-2019-3417

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by command injection vulnerability. Due to insufficient parameter validation check, an authorized user can exploit this vulnerability to take control of user router system...

CVE-2019-3417

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by command injection vulnerability. Due to insufficient parameter validation check, an authorized user can exploit this vulnerability to take control of user router system...

CVE-2019-3418

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by cross-site scripting vulnerability XSS. Due to incomplete input validation, an authorized user can exploit this vulnerability to execute malicious scripts...

Command injection

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by command injection vulnerability. Due to insufficient parameter validation check, an authorized user can exploit this vulnerability to take control of user router system...

Cross site scripting

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by cross-site scripting vulnerability XSS. Due to incomplete input validation, an authorized user can exploit this vulnerability to execute malicious scripts...

CVE-2019-3418

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by cross-site scripting vulnerability XSS. Due to incomplete input validation, an authorized user can exploit this vulnerability to execute malicious scripts...

CVE-2019-3418

The CVE-2019-3418 entry concerns the ZTE ZXHN F670 family. A cross-site scripting (XSS) vulnerability exists due to incomplete input validation, affecting all versions up to V1.1.10P3T18. An authorized user can trigger the vulnerability to execute malicious scripts (impact: client-side code execu...

CVE-2019-3417

The CVE-2019-3417 entry concerns the ZTE ZXHN F670 router. Affected versions: all versions up to V1.1.10P3T18. Root cause: insufficient parameter validation enables a command injection via an authorized user. Impact per sources: an attacker can take control of the user router system. Remediation:...

CVE-2019-3417

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by command injection vulnerability. Due to insufficient parameter validation check, an authorized user can exploit this vulnerability to take control of user router system...

PT-2019-16569 · Zte · Zte Zxhn F670

Name of the Vulnerable Software and Affected Versions: ZTE ZXHN F670 versions prior to V1.1.10P3T18 Description: The issue is related to a command injection vulnerability due to insufficient parameter validation check. This allows an authorized user to exploit the vulnerability and take control o...

PT-2019-16570 · Zte · Zxhn F670

Name of the Vulnerable Software and Affected Versions: ZTE ZXHN F670 product versions up to V1.1.10P3T18 Description: The issue is related to a cross-site scripting vulnerability XSS due to incomplete input validation. An authorized user can exploit this to execute malicious scripts...

NewStart CGSL CORE 5.04 / MAIN 5.04 : flatpak Vulnerability (NS-SA-2019-0056)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has flatpak packages installed that are affected by a vulnerability: - Flatpak before 1.0.7, and 1.1.x and 1.2.x before 1.2.3, exposes /proc in the applyextra script sandbox, which allows attackers to modify a host-side...

NewStart CGSL CORE 5.04 / MAIN 5.04 : wget Vulnerability (NS-SA-2019-0065)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has wget packages installed that are affected by a vulnerability: - A cookie injection flaw was found in wget. An attacker can create a malicious website which, when accessed, overrides cookies belonging to arbitrary domains...

NewStart CGSL CORE 5.05 / MAIN 5.05 : wget Vulnerability (NS-SA-2019-0082)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has wget packages installed that are affected by a vulnerability: - Buffer overflow in GNU Wget 1.20.1 and earlier allows remote attackers to cause a denial-of-service DoS or may execute an arbitrary code via unspecified vector...