Vulnerability index

Browse CVEs

162 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Zxiptv Firmware CRITICAL 9.1
CVE-2020-6874

A ZTE product is impacted by the cryptographic issues vulnerability. The encryption algorithm is not properly used, so remote attackers could use thi…

Mitigation only
Fix from $2,300 2020-09-01
Zxr10 2800 4 Almpufb\(low\) Firmware MEDIUM 5.3
CVE-2020-6873

A ZTE product has a DoS vulnerability. Because the equipment couldn’t distinguish the attack packets and normal packets with valid http links, the re…

Fix: after 3.00.40
Fix from $1,600 2020-09-01
R8500g4 Firmware CRITICAL 9.8
CVE-2020-6871

The server management software module of ZTE has an authentication issue vulnerability, which allows users to skip the authentication of the server a…

Mitigation only
Fix from $2,300 2020-07-20
R8500g4 Firmware MEDIUM 6.1
CVE-2020-6872

The server management software module of ZTE has a storage XSS vulnerability. The attacker inserts some attack codes through the foreground login pag…

Mitigation only
Fix from $1,600 2020-07-20
Netnumen U31 R10 Firmware HIGH 8.0
CVE-2020-6870

The version V12.17.20T115 of ZTE U31R20 product is impacted by a design error vulnerability. An attacker could exploit the vulnerability to log in to…

Mitigation only
Fix from $1,950 2020-06-24
Ztemarket Apk HIGH 8.1
CVE-2020-6869

All versions up to 10.06 of ZTEMarket APK are impacted by an information leak vulnerability. Due to Activity Component exposure users can exploit thi…

Fix: after 10.06
Fix from $1,950 2020-06-17
F680 Firmware MEDIUM 6.5
CVE-2020-6868

There is an input validation vulnerability in a PON terminal product of ZTE, which supports the creation of WAN connections through WEB management pa…

Mitigation only
Fix from $1,600 2020-06-01
Oscp MEDIUM 6.5
CVE-2020-6865

ZTE SDN controller platform is impacted by an information leakage vulnerability. Due to the program's failure to optimize the response of failure to …

Mitigation only
Fix from $1,600 2020-04-30
Zenic One R22b MEDIUM 5.5
CVE-2020-6867

ZTE's SDON controller is impacted by the resource management error vulnerability. When RPC is frequently called by other applications in the case of …

Mitigation only
Fix from $1,600 2020-04-30
E8820v3 Firmware MEDIUM 6.5
CVE-2020-6863

ZTE E8820V3 router product is impacted by a permission and access control vulnerability. Attackers could use this vulnerability to tamper with DDNS p…

Fix: 3.1.0.1000.5+
Fix from $1,600 2020-02-27
E8820v3 Firmware MEDIUM 6.5
CVE-2020-6864

ZTE E8820V3 router product is impacted by an information leak vulnerability. Attackers could use this vulnerability to to gain wireless passwords. Af…

Fix: 3.1.0.1000.5+
Fix from $1,600 2020-02-27
Zxv10 W300 Firmware HIGH 7.5
CVE-2014-4019EPSS 13%

ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficient access control, which allows…

No fix yet
Fix from $1,950 2020-02-20
F6x2w Firmware MEDIUM 5.3
CVE-2020-6862EPSS 6%

V6.0.10P2T2 and V6.0.10P2T5 of F6x2W product are impacted by Information leak vulnerability. Unauthorized users could log in directly to obtain page …

No fix yet
Fix from $1,600 2020-01-17
Zxcloud Goldendata Vap CRITICAL 9.8
CVE-2019-3431

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have encryption problems vulnerability. Attackers could sniff unencrypted accoun…

Mitigation only
Fix from $2,300 2019-12-23
Zxcloud Goldendata Vap MEDIUM 5.3
CVE-2019-3429

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have a file reading vulnerability. Attackers could obtain log file information w…

Mitigation only
Fix from $1,600 2019-12-23
Zxcdn Iamweb Firmware HIGH 7.2
CVE-2019-3427

The version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a code injection vulnerability. An attacker could exploit the vulnerability to inj…

Mitigation only
Fix from $1,950 2019-11-22
Zxcdn Iamweb Firmware MEDIUM 6.5
CVE-2019-3428

The version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a configuration error vulnerability. An attacker could directly access the managem…

Mitigation only
Fix from $1,600 2019-11-22
Zxhn H108n Firmware MEDIUM 6.5
CVE-2019-3420

All versions up to V2.5.0_EG1T5_TED of ZTE ZXHN H108N product are impacted by an information leak vulnerability. An attacker could exploit the vulner…

Fix: after 2.5.0_eg1t5_ted
Fix from $1,600 2019-11-13
Zxupn 9000e Firmware HIGH 8.8
CVE-2019-3425

The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by vulnerability of permission and access control. An at…

Fix: 9000ev5.0r1b12+
Fix from $1,950 2019-11-08
Zxupn 9000e Firmware HIGH 8.8
CVE-2019-3426

The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by the input validation vulnerability. An attacker could…

Fix: 9000ev5.0r1b12+
Fix from $1,950 2019-11-08
Mf910s Firmware MEDIUM 6.2
CVE-2019-3422

The Sec Consult Security Lab reported an information disclosure vulnerability in MF910S product to ZTE PSIRT in October 2019. Through the analysis of…

No fix yet
Fix from $1,600 2019-11-07
Zxmp M721 Dx Firmware MEDIUM 5.7
CVE-2019-3419

A security vulnerability exists in a management port in the version of ZTE's ZXMP M721V3.10P01B10_M2NCP. An attacker could exploit this vulnerability…

Mitigation only
Fix from $1,600 2019-10-31
Zxv10 B860a Firmware CRITICAL 9.8
CVE-2019-3416

All versions up to V81511329.1008 of ZTE ZXV10 B860A products are impacted by input validation vulnerability. Due to input validation, unauthorized u…

Fix: after 81511329.1008
Fix from $2,300 2019-09-23
Zxhn F670 Firmware HIGH 8.8
CVE-2019-3417

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by command injection vulnerability. Due to insufficient parameter validation ch…

Fix: after 1.1.10p3t18
Fix from $1,950 2019-08-15
Zxhn F670 Firmware MEDIUM 5.4
CVE-2019-3418

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by cross-site scripting vulnerability (XSS). Due to incomplete input validation…

Fix: after 1.1.10p3t18
Fix from $1,600 2019-08-15
Zxmw Nr8000 Firmware MEDIUM 5.7
CVE-2019-3415

ZTE MW NR8000V2.4.4.03 and NR8000V2.4.4.04 are impacted by path traversal vulnerability. Due to path traversal,users can download any files.

Mitigation only
Fix from $1,600 2019-07-11
Mf920 Firmware CRITICAL 9.8
CVE-2019-3412

All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by command execution vulnerability. Due to some interfaces do not adequately verify …

Mitigation only
Fix from $2,300 2019-06-11
Mf920 Firmware HIGH 7.5
CVE-2019-3411

All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by information leak vulnerability. Due to some interfaces can obtain the WebUI login…

Mitigation only
Fix from $1,950 2019-06-11
Netnumen Dap Firmware MEDIUM 5.4
CVE-2019-3413

All versions up to V20.18.40.R7.B1of ZTE NetNumen DAP product have an XSS vulnerability. Due to the lack of correct validation of client data in WEB …

Fix: after 20.18.40.r7.b1
Fix from $1,600 2019-06-11
Wf820\+ Lte Outdoor Cpe Firmware HIGH 8.8
CVE-2019-3409

All versions up to UKBB_WF820+_1.0.0B06 of ZTE WF820+ LTE Outdoor CPE product are impacted by command injection vulnerability. Due to inadequate para…

Fix: 1.0.0b06+
Fix from $1,950 2019-06-11