Vulnerability index

Browse CVEs

96 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

F6x2w Firmware MEDIUM 5.3
CVE-2020-6862EPSS 6%

V6.0.10P2T2 and V6.0.10P2T5 of F6x2W product are impacted by Information leak vulnerability. Unauthorized users could log in directly to obtain page …

No fix yet
Fix from $1,600 2020-01-17
Zxcloud Goldendata Vap CRITICAL 9.8
CVE-2019-3431

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have encryption problems vulnerability. Attackers could sniff unencrypted accoun…

Mitigation only
Fix from $2,300 2019-12-23
Zxcloud Goldendata Vap MEDIUM 5.3
CVE-2019-3429

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have a file reading vulnerability. Attackers could obtain log file information w…

Mitigation only
Fix from $1,600 2019-12-23
Zxcdn Iamweb Firmware HIGH 7.2
CVE-2019-3427

The version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a code injection vulnerability. An attacker could exploit the vulnerability to inj…

Mitigation only
Fix from $1,950 2019-11-22
Zxcdn Iamweb Firmware MEDIUM 6.5
CVE-2019-3428

The version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a configuration error vulnerability. An attacker could directly access the managem…

Mitigation only
Fix from $1,600 2019-11-22
Mf910s Firmware MEDIUM 6.2
CVE-2019-3422

The Sec Consult Security Lab reported an information disclosure vulnerability in MF910S product to ZTE PSIRT in October 2019. Through the analysis of…

No fix yet
Fix from $1,600 2019-11-07
Zxmp M721 Dx Firmware MEDIUM 5.7
CVE-2019-3419

A security vulnerability exists in a management port in the version of ZTE's ZXMP M721V3.10P01B10_M2NCP. An attacker could exploit this vulnerability…

Mitigation only
Fix from $1,600 2019-10-31
Zxmw Nr8000 Firmware MEDIUM 5.7
CVE-2019-3415

ZTE MW NR8000V2.4.4.03 and NR8000V2.4.4.04 are impacted by path traversal vulnerability. Due to path traversal,users can download any files.

Mitigation only
Fix from $1,600 2019-07-11
Mf920 Firmware CRITICAL 9.8
CVE-2019-3412

All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by command execution vulnerability. Due to some interfaces do not adequately verify …

Mitigation only
Fix from $2,300 2019-06-11
Mf920 Firmware HIGH 7.5
CVE-2019-3411

All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by information leak vulnerability. Due to some interfaces can obtain the WebUI login…

Mitigation only
Fix from $1,950 2019-06-11
Zxv10 B860av2.1 Chinamobile Firmware MEDIUM 6.8
CVE-2018-7366

ZTE ZXV10 B860AV2.1 product ChinaMobile branch with the ICNT versions up to V1.3.3, the BESTV versions up to V1.2.2, the WASU versions up to V1.1.7 a…

Mitigation only
Fix from $1,600 2018-12-28
Zxin10 CRITICAL 9.8
CVE-2018-7364EPSS 10%

All versions up to ZXINOS-RESV1.01.43 of the ZTE ZXIN10 product European region are impacted by improper access control vulnerability. Due to imprope…

No fix yet
Fix from $2,300 2018-12-07
Zxhn H168n Firmware HIGH 8.8
CVE-2018-7357EPSS 88%

ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper access control vulnerability, wh…

No fix yet
Fix from $1,950 2018-11-14
Zxhn H168n Firmware HIGH 8.8
CVE-2018-7358EPSS 90%

ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper change control vulnerability, wh…

No fix yet
Fix from $1,950 2018-11-14
Zxdsl 831cii Firmware HIGH 7.5
CVE-2017-16953EPSS 11%

connoppp.cgi on ZTE ZXDSL 831CII devices does not require HTTP Basic Authentication, which allows remote attackers to modify the PPPoE configuration …

No fix yet
Fix from $1,950 2017-12-01
Zxdt22 Sf01 Firmware HIGH 7.5
CVE-2017-10933

All versions prior to V2.06.00.00 of ZTE ZXDT22 SF01, an monitoring system of ZTE energy product, are impacted by directory traversal vulnerability t…

Mitigation only
Fix from $1,950 2017-10-19
Ox 330p Firmware HIGH 7.5
CVE-2015-7255

ZTE OX-330P, ZXHN H108N, W300V1.0.0S_ZRD_TR1_D68, HG110, GAN9.8T101A-B, MF28G, ZXHN H108N use non-unique X.509 certificates and SSH host keys, which …

Mitigation only
Fix from $1,950 2017-08-29
Zxv10 W300 Firmware HIGH 8.8
CVE-2015-7258EPSS 13%

ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated users to obtain user passwords by displaying …

No fix yet
Fix from $1,950 2017-08-24
Zxv10 W300 Firmware HIGH 8.8
CVE-2015-7259EPSS 9%

ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow user accounts to have multiple valid username and password pairs, …

No fix yet
Fix from $1,950 2017-08-24
Zxv10 W300 Firmware HIGH 7.5
CVE-2015-7257EPSS 7%

ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated non-administrator users to change the admin p…

No fix yet
Fix from $1,950 2017-08-24
Zxhn H108n R1a Firmware MEDIUM 6.5
CVE-2015-8703

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE and ZXV10 W300 devices W300V1.0.0f_ER1_PE allow remote authenticated users to bypass inte…

Mitigation only
Fix from $1,600 2015-12-30
Zxhn H108n R1a Firmware MEDIUM 6.1
CVE-2015-7252

Cross-site scripting (XSS) vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attackers to…

No fix yet
Fix from $1,600 2015-12-30
Zxhn H108n R1a Firmware CRITICAL 9.8
CVE-2015-7251EPSS 11%

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE have a hardcoded password of root for the root account, which allows remote attackers to …

No fix yet
Fix from $2,300 2015-12-30
Zxhn H108n R1a Firmware HIGH 7.5
CVE-2015-7250EPSS 16%

Absolute path traversal vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attackers to re…

No fix yet
Fix from $1,950 2015-12-30
Zxhn H108n R1a Firmware HIGH 7.5
CVE-2015-7248EPSS 7%

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote attackers to discover usernames and password hashes by reading the cgi-bin/w…

No fix yet
Fix from $1,950 2015-12-30
Zxdsl MEDIUM 5.0
CVE-2014-9184

ZTE ZXDSL 831CII allows remote attackers to bypass authentication via a direct request to (1) main.cgi, (2) adminpasswd.cgi, (3) userpasswd.cgi, (4) …

No fix yet
Fix from $1,600 2014-12-02
Zxdsl HIGH 10.0
CVE-2014-9183

ZTE ZXDSL 831CII has a default password of admin for the admin account, which allows remote attackers to gain administrator privileges.

Mitigation only
Fix from $1,950 2014-12-02
Zxdsl MEDIUM 6.8
CVE-2014-9019

Multiple cross-site request forgery (CSRF) vulnerabilities in ZTE ZXDSL 831CII allow remote attackers to hijack the authentication of administrators …

No fix yet
Fix from $1,600 2014-11-20
Zxhn H108l Firmware MEDIUM 5.0
CVE-2014-8493EPSS 8%

ZTE ZXHN H108L with firmware 4.0.0d_ZRQ_GR4 allows remote attackers to modify the CWMP configuration via a crafted request to Forms/access_cwmp_1.

No fix yet
Fix from $1,600 2014-11-20
Zxv10 W300 Firmware HIGH 7.8
CVE-2014-4018EPSS 6%

The ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK has a default password of admin for the admin account, which makes it easier for remote at…

No fix yet
Fix from $1,950 2014-07-16