CVE-2018-7365

All versions up to ZXCLOUD iRAI V5.01.05 of the ZTE uSmartView product are impacted by untrusted search path vulnerability, which may allow an unauthorized user to perform unauthorized operations...

Design/Logic Flaw

All versions up to ZXCLOUD iRAI V5.01.05 of the ZTE uSmartView product are impacted by untrusted search path vulnerability, which may allow an unauthorized user to perform unauthorized operations...

CVE-2018-7365

All versions up to ZXCLOUD iRAI V5.01.05 of the ZTE uSmartView product are impacted by untrusted search path vulnerability, which may allow an unauthorized user to perform unauthorized operations...

CVE-2018-7365

CVE-2018-7365 affects ZTE uSmartView prior to and including v5.01.05. The root cause is an untrusted search path, which may allow an unauthorized user to perform unauthorized operations. Public documents provided do not specify exploit details or confirmed in-the-wild use. Depending on the source...

ZTE Home Gateway ZXHN H168N 2.2 Access Control Bypass

POC: CVE-2018-7357 and CVE-2018-7358 Disclaimer: This POC is for Educational Purposes , I would Not be responsible for any misuse of the information mentioned in this blog post + Unauthenticated + Author: Usman Saeed usman at xc0re.net + Protocol: UPnP + Affected Harware/Software: Model name: ZXH...

ZTE ZXHN H168N - Improper Access Restrictions

ZTE ZXHN H168N - Improper Access Restrictions POC: CVE-2018-7357 and CVE-2018-7358 Disclaimer: This POC is for Educational Purposes , I would Not be responsible for any misuse of the information mentioned in this blog post + Unauthenticated + Author: Usman Saeed usman at xc0re.net + Protocol: UPn...

ZTE Home Gateway ZXHN H168N 2.2 Access Control Bypass Vulnerability

ZTE Home Gateway ZXHN H168N suffers from multiple access bypass and information disclosure vulnerabilities. POC: CVE-2018-7357 and CVE-2018-7358 Disclaimer: This POC is for Educational Purposes , I would Not be responsible for any misuse of the information mentioned in this blog post +...

ZTE ZXHN H168N - Improper Access Restrictions

POC: CVE-2018-7357 and CVE-2018-7358 Disclaimer: This POC is for Educational Purposes , I would Not be responsible for any misuse of the information mentioned in this blog post + Unauthenticated + Author: Usman Saeed usman at xc0re.net + Protocol: UPnP + Affected Harware/Software: Model name: ZXH...

Improper access control

All versions up to ZXINOS-RESV1.01.43 of the ZTE ZXIN10 product European region are impacted by improper access control vulnerability. Due to improper access control to devcomm process, an unauthorized remote attacker can exploit this vulnerability to execute arbitrary code with root privileges...

CVE-2018-7364

All versions up to ZXINOS-RESV1.01.43 of the ZTE ZXIN10 product European region are impacted by improper access control vulnerability. Due to improper access control to devcomm process, an unauthorized remote attacker can exploit this vulnerability to execute arbitrary code with root privileges...

CVE-2018-7364

The CVE-2018-7364 entry concerns ZTE ZXIN10 (European region) with ZXINOS-RESV1.01.43. Affected: all versions up to ZXINOS-RESV1.01.43. Root cause: improper access control to the devcomm process allowing an unauthenticated, remote attacker to execute arbitrary code with root privileges. Impact: h...

CVE-2018-7364

All versions up to ZXINOS-RESV1.01.43 of the ZTE ZXIN10 product European region are impacted by improper access control vulnerability. Due to improper access control to devcomm process, an unauthorized remote attacker can exploit this vulnerability to execute arbitrary code with root privileges...

ZTE ZXHN F670 Null Pointer Dereference Vulnerability

The ZTE ZXHN F670 is an ITU-T G.984 and ITU-T g.988 compliant Optical Network Terminal ONT designed for high-end home users. A null pointer dereference vulnerability exists in 1.1.10P3T18 and earlier versions of the ZTE ZXHN F670, which can be exploited by an attacker to cause a denial of service...

ZTE ZXHN F670 Buffer Overflow Vulnerability

The ZTE ZXHN F670 is an ITU-T G.984 and ITU-T g.988 compliant Optical Network Terminal ONT designed for high-end home users. A heap buffer overflow vulnerability exists in 1.1.10P3T18 and earlier versions of the ZTE ZXHN F670, which can be exploited by an attacker to execute arbitrary code...

ZTE ZXHN F670 Improper Authorization Vulnerability

The ZTE ZXHN F670 is an ITU-T G.984 and ITU-T g.988 compliant Optical Network Terminal ONT designed for high-end home users. An improper authorization vulnerability exists in 1.1.10P3T18 and earlier versions of the ZTE ZXHN F670, which can be exploited by an attacker to brute-force break account...

ZTE ZXHN F670 Information Disclosure Vulnerability

The ZTE ZXHN F670 is a modem from China's ZTE Corporation ZTE. An information disclosure vulnerability exists in ZTE ZXHN F670 V1.1.10P3T18 and earlier versions, which can be exploited by an attacker to obtain GPON SN information with the help of appviahttp service...

ZTE ZXHN F670 Improper Access Control Vulnerability

The ZTE ZXHN F670 is an ITU-T G.984 and ITU-T g.988 compliant Optical Network Terminal ONT designed for high-end home users. An improper access control vulnerability exists in 1.1.10P3T18 and earlier versions of the ZTE ZXHN F670, which can be exploited by unauthorized users to perform unauthoriz...

Authorization

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper authorization vulnerability. Since appviahttp service has no authorization delay, an attacker can be allowed to brute force account credentials...

CVE-2018-7361

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by null pointer dereference vulnerability, which may allows an attacker to cause a denial of service via appviahttp service...

CVE-2018-7362

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper access control vulnerability, which may allows an unauthorized user to perform unauthorized operations on the router...