Lucene search
+L

1784 matches found

NVD
NVD
added 2024/08/08 8:15 a.m.33 views

CVE-2024-22069

There is a permission and access control vulnerability of ZTE's ZXV10 XT802/ET301 product.Attackers with common permissions can log in the terminal web and change the password of the administrator illegally by intercepting requests to change the passwords...

8.8CVSS0.00262EPSS
SaveExploits0References1
OSV
OSV
added 2024/08/08 8:15 a.m.6 views

CVE-2024-22069

There is a permission and access control vulnerability of ZTE's ZXV10 XT802/ET301 product.Attackers with common permissions can log in the terminal web and change the password of the administrator illegally by intercepting requests to change the passwords...

8.8CVSS5.8AI score0.00262EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/08/08 7:54 a.m.34 views

CVE-2024-22069 Permission and Access Control Vulnerability in ZXV10 XT802/ET301

There is a permission and access control vulnerability of ZTE's ZXV10 XT802/ET301 product.Attackers with common permissions can log in the terminal web and change the password of the administrator illegally by intercepting requests to change the passwords...

7.1CVSS0.00262EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/08 7:54 a.m.22 views

CVE-2024-22069 Permission and Access Control Vulnerability in ZXV10 XT802/ET301

There is a permission and access control vulnerability of ZTE's ZXV10 XT802/ET301 product.Attackers with common permissions can log in the terminal web and change the password of the administrator illegally by intercepting requests to change the passwords...

7.1CVSS7AI score0.00262EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/08 7:54 a.m.59 views

CVE-2024-22069

CVE-2024-22069 affects ZTE ZXV10 XT802/ET301. The issue is a permission and access control vulnerability allowing a user with common permissions to log in to the terminal web interface and illegally change the administrator password by intercepting password-change requests. Reported as a network-...

8.8CVSS7AI score0.00262EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/08/08 12:0 a.m.8 views

PT-2024-19183 · Zte · Zte Zxv10 Xt802/Et301

Name of the Vulnerable Software and Affected Versions: ZTE ZXV10 XT802/ET301 product affected versions not specified Description: The issue is related to a permission and access control vulnerability. Attackers with common permissions can log in to the terminal web and change the administrator's...

8.8CVSS7.1AI score0.00262EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2024/07/09 6:41 a.m.26 views

CVE-2024-22062 Permissions and Access Control Vulnerability in ZTE ZXCLOUD IRAI

There is a permissions and access control vulnerability in ZXCLOUD IRAI.An attacker can elevate non-administrator permissions to administrator permissions by modifying the configuration...

6.3CVSS0.00165EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/07/09 6:41 a.m.23 views

CVE-2024-22062 Permissions and Access Control Vulnerability in ZTE ZXCLOUD IRAI

There is a permissions and access control vulnerability in ZXCLOUD IRAI.An attacker can elevate non-administrator permissions to administrator permissions by modifying the configuration...

6.3CVSS6.8AI score0.00165EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/07/09 12:0 a.m.9 views

ZTE ZXCLOUD iRAI Security Vulnerability

ZTE ZXCLOUD iRAI is a virtualization device from ZTE Corporation ZTE, China. A security vulnerability exists in ZTE ZXCLOUD iRAI V7.23.31 and earlier versions, which stems from the presence of a privilege and access control vulnerability that allows an attacker to elevate non-administrator...

8.8CVSS6.8AI score0.00165EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/06/28 12:0 a.m.13 views

The vulnerability of ZTE ZXHN H388X router’s micro-programming software, related to improper storage of resolutions, allows attackers to increase their privileges.

The vulnerability of ZTE ZXHN H388X router’s microprogramming software is related to improper storage of permissions. Exploiting this vulnerability can allow attackers to enhance their privileges through specially created requests...

7.1CVSS5.5AI score0.0024EPSS
SaveExploits0References3
OSV
OSV
added 2024/06/20 7:15 a.m.5 views

CVE-2023-25646

There is an unauthorized access vulnerability in ZTE H388X. If H388X is caused by brute-force serial port cracking,attackers with common user permissions can use this vulnerability to obtain elevated permissions on the affected device by performing specific operations...

6.4CVSS5.8AI score0.0024EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/20 7:15 a.m.30 views

CVE-2023-25646

There is an unauthorized access vulnerability in ZTE H388X. If H388X is caused by brute-force serial port cracking,attackers with common user permissions can use this vulnerability to obtain elevated permissions on the affected device by performing specific operations...

7.1CVSS0.0024EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/20 6:20 a.m.26 views

CVE-2023-25646 Permission and Access Control Vulnerability in ZTE H388X

There is an unauthorized access vulnerability in ZTE H388X. If H388X is caused by brute-force serial port cracking,attackers with common user permissions can use this vulnerability to obtain elevated permissions on the affected device by performing specific operations...

7.1CVSS0.0024EPSS
SaveExploits0References1
CVE
CVE
added 2024/06/20 6:20 a.m.65 views

CVE-2023-25646

CVE-2023-25646 concerns an unauthorized-access flaw in the ZTE H388X router (ZXHN H388X). Descriptions cite brute-force serial-port cracking that could enable attackers with ordinary user permissions to perform operations to obtain elevated privileges. Documents consistently name a physical attac...

7.1CVSS6.8AI score0.0024EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/20 6:20 a.m.15 views

CVE-2023-25646 Permission and Access Control Vulnerability in ZTE H388X

There is an unauthorized access vulnerability in ZTE H388X. If H388X is caused by brute-force serial port cracking,attackers with common user permissions can use this vulnerability to obtain elevated permissions on the affected device by performing specific operations...

7.1CVSS6.8AI score0.0024EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/06/20 12:0 a.m.33 views

ZTE ZXHN H388X Unauthorized Access Vulnerability

The ZTE ZXHN H388X is a router from ZTE ZTE. An unauthorized access vulnerability exists in the ZTE ZXHN H388X. An attacker can exploit this vulnerability to gain elevation of privilege on an affected device by performing specific actions...

7.1CVSS7AI score0.0024EPSS
SaveExploits0References1
NVD
NVD
added 2024/05/14 2:56 p.m.29 views

CVE-2024-22064

ZTE ZXUN-ePDG product, which serves as the network node of the VoWifi system, under by default configuration, uses a set of non-unique cryptographic keys during establishing a secure connectionIKE with the mobile devices connecting over the internet . If the set of keys are leaked or cracked, the...

8.3CVSS8.3AI score0.00457EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/05/14 12:0 a.m.18 views

ZTE ZXUN-ePDG 安全漏洞

The ZTE ZXUN-ePDG is a network node device for the VoWifi system from ZTE Corporation ZTE, China. A security vulnerability exists in the ZTE ZXUN-ePDG. An attacker can exploit the vulnerability to obtain sensitive information...

8.3CVSS6.6AI score0.00457EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/05/10 12:28 p.m.28 views

CVE-2024-22064 Configuration error Vulnerability in ZTE ZXUN-ePDG

ZTE ZXUN-ePDG product, which serves as the network node of the VoWifi system, under by default configuration, uses a set of non-unique cryptographic keys during establishing a secure connectionIKE with the mobile devices connecting over the internet . If the set of keys are leaked or cracked, the...

8.3CVSS8.5AI score0.00457EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/05/10 12:28 p.m.28 views

CVE-2024-22064 Configuration error Vulnerability in ZTE ZXUN-ePDG

ZTE ZXUN-ePDG product, which serves as the network node of the VoWifi system, under by default configuration, uses a set of non-unique cryptographic keys during establishing a secure connectionIKE with the mobile devices connecting over the internet . If the set of keys are leaked or cracked, the...

8.3CVSS7AI score0.00457EPSS
SaveExploits0References1
Rows per page
Query Builder