CVE-2018-7363

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper authorization vulnerability. Since appviahttp service has no authorization delay, an attacker can be allowed to brute force account credentials...

CVE-2018-7361

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by null pointer dereference vulnerability, which may allows an attacker to cause a denial of service via appviahttp service...

Improper access control

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper access control vulnerability, which may allows an unauthorized user to perform unauthorized operations on the router...

Information disclosure

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by information exposure vulnerability, which may allow an unauthenticated attacker to get the GPON SN information via appviahttp service...

CVE-2018-7359

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by heap-based buffer overflow vulnerability, which may allow an attacker to execute arbitrary code...

CVE-2018-7360

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by information exposure vulnerability, which may allow an unauthenticated attacker to get the GPON SN information via appviahttp service...

Heap overflow

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by heap-based buffer overflow vulnerability, which may allow an attacker to execute arbitrary code...

Null pointer dereference

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by null pointer dereference vulnerability, which may allows an attacker to cause a denial of service via appviahttp service...

CVE-2018-7363

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper authorization vulnerability. Since appviahttp service has no authorization delay, an attacker can be allowed to brute force account credentials...

CVE-2018-7360

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by information exposure vulnerability, which may allow an unauthenticated attacker to get the GPON SN information via appviahttp service...

CVE-2018-7363

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper authorization vulnerability. Since appviahttp service has no authorization delay, an attacker can be allowed to brute force account credentials...

CVE-2018-7359

CVE-2018-7359 affects ZTE ZXHN F670 devices up to version 1.1.10P3T18, with a heap-based buffer overflow in the device’s software that can allow an attacker to execute arbitrary code. The CNVD entry specifies a heap overflow vulnerability in the ZXHN F670 (1.1.10P3T18 and earlier), while NVD reit...

CVE-2018-7362

CVE-2018-7362 affects ZTE ZXHN F670 routers up to version 1.1.10P3T18 due to improper access control, allowing an unauthorized user to perform unauthorized operations. This vulnerability is documented across multiple sources (NVD/CNV D/CVELIST). The connected documents confirm the affected produc...

CVE-2018-7361

The CVE-2018-7361 entry affects ZTE ZXHN F670 firmware up to version 1.1.10P3T18, where a null pointer dereference in the appviahttp service can lead to a denial of service. Root cause: null pointer dereference. Impact: availability degradation (PARTIAL on CVSSv2, HIGH on CVSSv3). Connected docum...

CVE-2018-7362

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper access control vulnerability, which may allows an unauthorized user to perform unauthorized operations on the router...

CVE-2018-7359

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by heap-based buffer overflow vulnerability, which may allow an attacker to execute arbitrary code...

CVE-2018-7360

The CVE-2018-7360 entry concerns the ZTE ZXHN F670 modem (V1.1.10P3T18 and earlier). Affected component: appviahttp service leading to an information exposure vulnerability that could allow an unauthenticated attacker to obtain the GPON SN. The connected CNVD/EUVD entries corroborate that the iss...

CVE-2018-7363

ZTE ZXHN F670 devices with firmware versions up to 1.1.10P3T18 are affected by an improper authorization vulnerability. The appviahttp service has no authorization delay, allowing brute‑force credential attempts. Connected records confirm affected versions and brute‑force risk; no exploit details...

CVE-2018-7361

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by null pointer dereference vulnerability, which may allows an attacker to cause a denial of service via appviahttp service...

CVE-2018-7360

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by information exposure vulnerability, which may allow an unauthenticated attacker to get the GPON SN information via appviahttp service...