Browse CVEs

MEDIUM 5.3 CVE-2020-6862EPSS 6% V6.0.10P2T2 and V6.0.10P2T5 of F6x2W product are impacted by Information leak vulnerability. Unauthorized users could log in directly to obtain page … F6x2w Firmware No fix yet Fix from $1,6002020-01-17 CRITICAL 9.8 CVE-2019-3431 All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have encryption problems vulnerability. Attackers could sniff unencrypted accoun… Zxcloud Goldendata Vap Mitigation only Fix from $2,3002019-12-23 MEDIUM 5.3 CVE-2019-3429 All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have a file reading vulnerability. Attackers could obtain log file information w… Zxcloud Goldendata Vap Mitigation only Fix from $1,6002019-12-23 HIGH 7.2 CVE-2019-3427 The version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a code injection vulnerability. An attacker could exploit the vulnerability to inj… Zxcdn Iamweb Firmware Mitigation only Fix from $1,9502019-11-22 MEDIUM 6.5 CVE-2019-3428 The version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a configuration error vulnerability. An attacker could directly access the managem… Zxcdn Iamweb Firmware Mitigation only Fix from $1,6002019-11-22 MEDIUM 6.2 CVE-2019-3422 The Sec Consult Security Lab reported an information disclosure vulnerability in MF910S product to ZTE PSIRT in October 2019. Through the analysis of… Mf910s Firmware No fix yet Fix from $1,6002019-11-07 MEDIUM 5.7 CVE-2019-3419 A security vulnerability exists in a management port in the version of ZTE's ZXMP M721V3.10P01B10_M2NCP. An attacker could exploit this vulnerability… Zxmp M721 Dx Firmware Mitigation only Fix from $1,6002019-10-31 MEDIUM 5.7 CVE-2019-3415 ZTE MW NR8000V2.4.4.03 and NR8000V2.4.4.04 are impacted by path traversal vulnerability. Due to path traversal,users can download any files. Zxmw Nr8000 Firmware Mitigation only Fix from $1,6002019-07-11 CRITICAL 9.8 CVE-2019-3412 All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by command execution vulnerability. Due to some interfaces do not adequately verify … Mf920 Firmware Mitigation only Fix from $2,3002019-06-11 HIGH 7.5 CVE-2019-3411 All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by information leak vulnerability. Due to some interfaces can obtain the WebUI login… Mf920 Firmware Mitigation only Fix from $1,9502019-06-11 MEDIUM 6.8 CVE-2018-7366 ZTE ZXV10 B860AV2.1 product ChinaMobile branch with the ICNT versions up to V1.3.3, the BESTV versions up to V1.2.2, the WASU versions up to V1.1.7 a… Zxv10 B860av2.1 Chinamobile Firmware Mitigation only Fix from $1,6002018-12-28 CRITICAL 9.8 CVE-2018-7364EPSS 10% All versions up to ZXINOS-RESV1.01.43 of the ZTE ZXIN10 product European region are impacted by improper access control vulnerability. Due to imprope… Zxin10 No fix yet Fix from $2,3002018-12-07 HIGH 8.8 CVE-2018-7357EPSS 88% ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper access control vulnerability, wh… Zxhn H168n Firmware No fix yet Fix from $1,9502018-11-14 HIGH 8.8 CVE-2018-7358EPSS 90% ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper change control vulnerability, wh… Zxhn H168n Firmware No fix yet Fix from $1,9502018-11-14 HIGH 7.5 CVE-2017-16953EPSS 11% connoppp.cgi on ZTE ZXDSL 831CII devices does not require HTTP Basic Authentication, which allows remote attackers to modify the PPPoE configuration … Zxdsl 831cii Firmware No fix yet Fix from $1,9502017-12-01 HIGH 7.5 CVE-2017-10933 All versions prior to V2.06.00.00 of ZTE ZXDT22 SF01, an monitoring system of ZTE energy product, are impacted by directory traversal vulnerability t… Zxdt22 Sf01 Firmware Mitigation only Fix from $1,9502017-10-19 HIGH 7.5 CVE-2015-7255 ZTE OX-330P, ZXHN H108N, W300V1.0.0S_ZRD_TR1_D68, HG110, GAN9.8T101A-B, MF28G, ZXHN H108N use non-unique X.509 certificates and SSH host keys, which … Ox 330p Firmware Mitigation only Fix from $1,9502017-08-29 HIGH 8.8 CVE-2015-7258EPSS 13% ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated users to obtain user passwords by displaying … Zxv10 W300 Firmware No fix yet Fix from $1,9502017-08-24 HIGH 8.8 CVE-2015-7259EPSS 9% ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow user accounts to have multiple valid username and password pairs, … Zxv10 W300 Firmware No fix yet Fix from $1,9502017-08-24 HIGH 7.5 CVE-2015-7257EPSS 7% ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated non-administrator users to change the admin p… Zxv10 W300 Firmware No fix yet Fix from $1,9502017-08-24 MEDIUM 6.5 CVE-2015-8703 ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE and ZXV10 W300 devices W300V1.0.0f_ER1_PE allow remote authenticated users to bypass inte… Zxhn H108n R1a Firmware Mitigation only Fix from $1,6002015-12-30 MEDIUM 6.1 CVE-2015-7252 Cross-site scripting (XSS) vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attackers to… Zxhn H108n R1a Firmware No fix yet Fix from $1,6002015-12-30 CRITICAL 9.8 CVE-2015-7251EPSS 11% ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE have a hardcoded password of root for the root account, which allows remote attackers to … Zxhn H108n R1a Firmware No fix yet Fix from $2,3002015-12-30 HIGH 7.5 CVE-2015-7250EPSS 16% Absolute path traversal vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attackers to re… Zxhn H108n R1a Firmware No fix yet Fix from $1,9502015-12-30 HIGH 7.5 CVE-2015-7248EPSS 7% ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote attackers to discover usernames and password hashes by reading the cgi-bin/w… Zxhn H108n R1a Firmware No fix yet Fix from $1,9502015-12-30 MEDIUM 5.0 CVE-2014-9184 ZTE ZXDSL 831CII allows remote attackers to bypass authentication via a direct request to (1) main.cgi, (2) adminpasswd.cgi, (3) userpasswd.cgi, (4) … Zxdsl No fix yet Fix from $1,6002014-12-02 HIGH 10.0 CVE-2014-9183 ZTE ZXDSL 831CII has a default password of admin for the admin account, which allows remote attackers to gain administrator privileges. Zxdsl Mitigation only Fix from $1,9502014-12-02 MEDIUM 6.8 CVE-2014-9019 Multiple cross-site request forgery (CSRF) vulnerabilities in ZTE ZXDSL 831CII allow remote attackers to hijack the authentication of administrators … Zxdsl No fix yet Fix from $1,6002014-11-20 MEDIUM 5.0 CVE-2014-8493EPSS 8% ZTE ZXHN H108L with firmware 4.0.0d_ZRQ_GR4 allows remote attackers to modify the CWMP configuration via a crafted request to Forms/access_cwmp_1. Zxhn H108l Firmware No fix yet Fix from $1,6002014-11-20 HIGH 7.8 CVE-2014-4018EPSS 6% The ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK has a default password of admin for the admin account, which makes it easier for remote at… Zxv10 W300 Firmware No fix yet Fix from $1,9502014-07-16