1823 matches found
ZTE ZXDT22 SF01 Directory Traversal Vulnerability
The ZTE ZXDT22 SF01 is a DC power supply unit from ZTE Corporation ZTE, China. A directory traversal vulnerability exists in the ZTE ZXDT22 SF01 versions prior to 2.06.00.00. A remote attacker can exploit this vulnerability to read arbitrary files on the system...
The vulnerability of ZTE NR8000 series radio relay system micro-programming software relates to the deserialization process of Java objects, allowing an attacker to execute arbitrary code.
The vulnerability of ZTE NR8000 series radio relay system microprogramming software is related to the process of deserializing Java objects when processing requests via the Java RMI Remote Method Invocation service, using the Apache Commons Collections ACC library. Exploiting this vulnerability...
ZTE ZXR10 Router Multiple Vulnerabilities( CVE-2017-10931)
Vulnerabilities summary The following advisory describes five 5 vulnerabilities found in ZTE ZXR10 Router. ZXR10 ZSR V2 series router is “the next generation intelligent access router product of ZTE, which integrates routing, switching, wireless, security, and VPN gateway. The product adopts...
CVE-2017-10933
All versions prior to V2.06.00.00 of ZTE ZXDT22 SF01, an monitoring system of ZTE energy product, are impacted by directory traversal vulnerability that allows remote attackers to read arbitrary files on the system via a full path name after host address...
Directory traversal
All versions prior to V2.06.00.00 of ZTE ZXDT22 SF01, an monitoring system of ZTE energy product, are impacted by directory traversal vulnerability that allows remote attackers to read arbitrary files on the system via a full path name after host address...
CVE-2017-10933
All versions prior to V2.06.00.00 of ZTE ZXDT22 SF01, an monitoring system of ZTE energy product, are impacted by directory traversal vulnerability that allows remote attackers to read arbitrary files on the system via a full path name after host address...
CVE-2017-10933
All versions prior to V2.06.00.00 of ZTE ZXDT22 SF01, an monitoring system of ZTE energy product, are impacted by directory traversal vulnerability that allows remote attackers to read arbitrary files on the system via a full path name after host address...
CVE-2017-10933
ZTE ZXDT22 SF01 monitoring system (pre-2.06.00.00) is affected by a directory traversal vulnerability that lets an attacker read arbitrary files via a full path after the host. Affected versions are prior to 2.06.00.00; impact is information disclosure. No exploitation details are provided in the...
ZTE uSmartView DLL Hijacking
Vulnerability summary The following advisory describes an DLL Hijacking found in ZTE uSmartView. ZTE uSmartView offers: “ZTE provides full series of cloud computing products including cloud terminals, cloud desktops, virtualization software, and cloud storage products and end-to-end integrated...
ZTE Microwave NR8000 Series Product Remote Code Execution Vulnerability
ZTE Microwave NR8120 and others are microwave transmission solutions from China's ZTE Corporation ZTE. A security vulnerability exists in the ZTE Microwave NR8000 series products. A remote attacker can exploit the vulnerability by sending a specially crafted RMI request to execute arbitrary code ...
CSRF Vulnerability in ZTE ZXV10 H108B Wireless Cat
The ZXV10 H108B is a wireless broadband routing cat. A CSRF vulnerability exists in the ZTE ZXV10 H108B Wireless Cat, which allows an attacker to hijack the administrator's identity to modify the DNS settings of the wireless cat...
Deserialization of untrusted data
All versions prior to V12.17.20 of the ZTE Microwave NR8000 series products - NR8120, NR8120A, NR8120, NR8150, NR8250, NR8000 TR and NR8950 are the applications of C/S architecture using the Java RMI service in which the servers use the Apache Commons Collections ACC library that may result in Ja...
CVE-2017-10932
All versions prior to V12.17.20 of the ZTE Microwave NR8000 series products - NR8120, NR8120A, NR8120, NR8150, NR8250, NR8000 TR and NR8950 are the applications of C/S architecture using the Java RMI service in which the servers use the Apache Commons Collections ACC library that may result in Ja...
CVE-2017-10932
All versions prior to V12.17.20 of the ZTE Microwave NR8000 series products - NR8120, NR8120A, NR8120, NR8150, NR8250, NR8000 TR and NR8950 are the applications of C/S architecture using the Java RMI service in which the servers use the Apache Commons Collections ACC library that may result in Ja...
CVE-2017-10932
All versions prior to V12.17.20 of the ZTE Microwave NR8000 series products - NR8120, NR8120A, NR8120, NR8150, NR8250, NR8000 TR and NR8950 are the applications of C/S architecture using the Java RMI service in which the servers use the Apache Commons Collections ACC library that may result in Ja...
CVE-2017-10932
ZTE Microwave NR8000 series (NR8120/NR8120A/NR8120/NR8150/NR8250/NR8000 TR/NR8950) versions before V12.17.20 are affected. The devices use a C/S architecture with a Java RMI service whose servers rely on the Apache Commons Collections library, enabling Java deserialization vulnerabilities. An una...
ZTE ZXR10 1800-2S Improper Access Control Vulnerability
The ZTE ZXR10 1800-2S is a router from ZTE. The ZTE ZXR10 1800-2S fails to properly restrict the range of file download directories for web users, allowing remote attackers to exploit the vulnerability by submitting special requests to download configuration files and steal sensitive information...
CSRF Vulnerability in ZTE E8810 Wireless Router
The ZTE E8810 is a dual-band 11ac smart cloud router. A CSRF vulnerability exists in the ZTE E8810 wireless router. It allows an attacker to hijack the administrator identity to restore the router to factory settings...
CVE-2015-7255
ZTE OX-330P, ZXHN H108N, W300V1.0.0SZRDTR1D68, HG110, GAN9.8T101A-B, MF28G, ZXHN H108N use non-unique X.509 certificates and SSH host keys, which might allow remote attackers to obtain credentials or other sensitive information via a man-in-the-middle attack, passive decryption attack, or...
Design/Logic Flaw
ZTE OX-330P, ZXHN H108N, W300V1.0.0SZRDTR1D68, HG110, GAN9.8T101A-B, MF28G, ZXHN H108N use non-unique X.509 certificates and SSH host keys, which might allow remote attackers to obtain credentials or other sensitive information via a man-in-the-middle attack, passive decryption attack, or...