ZTE ZXCTN 数据伪造问题漏洞

ZTE ZXCTN is a packet transport product for the access layer of the bearer network of China ZTE ZTE. An authentication bypass vulnerability exists in ZTE ZXCTN 6120H version 5.10.00B24. The vulnerability is due to insufficient verification of data reliability by the system, which can be exploited...

Weak password vulnerability in ZTE smart routers

ZTE Corporation is a leading global provider of integrated communications and information solutions, offering innovative technology and product solutions to telecom operators, government and enterprise customers, and consumers worldwide. A weak password vulnerability exists in ZTE smart routers,...

Arbitrary File Read Vulnerability in ZTE Corporation 160 Router Web Management System

ZTE Corporation is a leading global provider of integrated communications and information solutions, offering innovative technology and product solutions to telecom operators, government and enterprise customers, and consumers worldwide. An arbitrary file read vulnerability exists in the web...

Weak Password Vulnerability in ZTE Corporation W908-A10000

W908-A10000 is a wireless controller from ZTE Corporation. A weak password vulnerability exists in the ZTE Corporation W908-A10000, which can be exploited by an attacker to obtain sensitive information...

CVE-2021-21737

A smart STB product of ZTE is impacted by a permission and access control vulnerability. Due to insufficient protection of system application, attackers could use this vulnerability to tamper with the system desktop and affect system customization functions. This affects: ZXV10 B860H V5.0,...

CVE-2021-21737

A smart STB product of ZTE is impacted by a permission and access control vulnerability. Due to insufficient protection of system application, attackers could use this vulnerability to tamper with the system desktop and affect system customization functions. This affects: ZXV10 B860H V5.0,...

Improper access control

A smart STB product of ZTE is impacted by a permission and access control vulnerability. Due to insufficient protection of system application, attackers could use this vulnerability to tamper with the system desktop and affect system customization functions. This affects: ZXV10 B860H V5.0,...

CVE-2021-21737

CVE-2021-21737 affects ZTE ZXV10 B860H family STBs (V5.0, V83011303.0010, V83011303.0016). The issue is a permission/access control vulnerability due to insufficient protection of system applications, enabling an attacker to tamper with the system desktop and affect system customization. No explo...

CVE-2021-21737

A smart STB product of ZTE is impacted by a permission and access control vulnerability. Due to insufficient protection of system application, attackers could use this vulnerability to tamper with the system desktop and affect system customization functions. This affects: ZXV10 B860H V5.0,...

ZXV10 B860H 安全漏洞

The ZTE ZXV10 B860H is a network set-top box from China's ZTE Corporation ZTE. A security vulnerability exists in the ZXV10 B860H, which can be exploited by an attacker due to insufficient protection of system applications may be exploited to tamper with the system desktop and affect system...

CVE-2021-21735

A ZTE product has an information leak vulnerability. Due to improper permission settings, an attacker with ordinary user permissions could exploit this vulnerability to obtain some sensitive user information through the wizard page without authentication. This affects ZXHN H168N all versions up t...

CVE-2021-21736

A smart camera product of ZTE is impacted by a permission and access control vulnerability. Due to the defect of user permission management by the cloud-end app, users whose sharing permissions have been revoked can still control the camera, such as restarting the camera, restoring factory...

CVE-2021-21736

A smart camera product of ZTE is impacted by a permission and access control vulnerability. Due to the defect of user permission management by the cloud-end app, users whose sharing permissions have been revoked can still control the camera, such as restarting the camera, restoring factory...

CVE-2021-21735

A ZTE product has an information leak vulnerability. Due to improper permission settings, an attacker with ordinary user permissions could exploit this vulnerability to obtain some sensitive user information through the wizard page without authentication. This affects ZXHN H168N all versions up t...

Design/Logic Flaw

A ZTE product has an information leak vulnerability. Due to improper permission settings, an attacker with ordinary user permissions could exploit this vulnerability to obtain some sensitive user information through the wizard page without authentication. This affects ZXHN H168N all versions up t...

Improper access control

A smart camera product of ZTE is impacted by a permission and access control vulnerability. Due to the defect of user permission management by the cloud-end app, users whose sharing permissions have been revoked can still control the camera, such as restarting the camera, restoring factory...

CVE-2021-21736

A smart camera product of ZTE is impacted by a permission and access control vulnerability. Due to the defect of user permission management by the cloud-end app, users whose sharing permissions have been revoked can still control the camera, such as restarting the camera, restoring factory...

CVE-2021-21736

CVE-2021-21736 affects ZTE ZXHN HS562 smart cameras (versions V1.0.0.0B2.0000 and V1.0.0.0B3.0000E). Root cause: improper user permission management by the cloud-end app, allowing users whose sharing permissions were revoked to still perform actions such as restarting the camera or restoring fact...

CVE-2021-21735

A ZTE product has an information leak vulnerability. Due to improper permission settings, an attacker with ordinary user permissions could exploit this vulnerability to obtain some sensitive user information through the wizard page without authentication. This affects ZXHN H168N all versions up t...

CVE-2021-21735

CVE-2021-21735 concerns a ZTE ZXHN H168N router with an information-leak vulnerability caused by improper permission settings. An attacker with ordinary user permissions can access sensitive user information through the wizard page without authentication, affecting all versions up to 3.5.0_EG1T4_...