Vulnerability index

Browse CVEs

162 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Wf820\+ Lte Outdoor Cpe Firmware HIGH 8.8
CVE-2019-3410

All versions up to UKBB_WF820+_1.0.0B06 of ZTE WF820+ LTE Outdoor CPE product are impacted by Cross-Site Request Forgery vulnerability,which stems fr…

Fix: 1.0.0b06+
Fix from $1,950 2019-06-11
Zxv10 B860av2.1 Chinamobile Firmware MEDIUM 6.8
CVE-2018-7366

ZTE ZXV10 B860AV2.1 product ChinaMobile branch with the ICNT versions up to V1.3.3, the BESTV versions up to V1.2.2, the WASU versions up to V1.1.7 a…

Mitigation only
Fix from $1,600 2018-12-28
Zxcloud Irai HIGH 7.2
CVE-2018-7365

All versions up to ZXCLOUD iRAI V5.01.05 of the ZTE uSmartView product are impacted by untrusted search path vulnerability, which may allow an unauth…

Fix: after 5.01.05
Fix from $1,950 2018-12-20
Zxin10 CRITICAL 9.8
CVE-2018-7364EPSS 10%

All versions up to ZXINOS-RESV1.01.43 of the ZTE ZXIN10 product European region are impacted by improper access control vulnerability. Due to imprope…

No fix yet
Fix from $2,300 2018-12-07
Zxhn F670 Firmware CRITICAL 9.8
CVE-2018-7359

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by heap-based buffer overflow vulnerability, which may allow an attacker to exe…

Fix: after 1.1.10p3t18
Fix from $2,300 2018-11-16
Zxhn F670 Firmware HIGH 8.8
CVE-2018-7362

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper access control vulnerability, which may allows an unauthorized user…

Fix: 1.1.10p3t18+
Fix from $1,950 2018-11-16
Zxhn F670 Firmware HIGH 8.8
CVE-2018-7363

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper authorization vulnerability. Since appviahttp service has no author…

Fix: 1.1.10p3t18+
Fix from $1,950 2018-11-16
Zxhn F670 Firmware MEDIUM 6.5
CVE-2018-7360

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by information exposure vulnerability, which may allow an unauthenticated attac…

Fix: 1.1.10p3t18+
Fix from $1,600 2018-11-16
Zxhn F670 Firmware MEDIUM 6.5
CVE-2018-7361

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by null pointer dereference vulnerability, which may allows an attacker to caus…

Fix: after 1.1.10p3t18
Fix from $1,600 2018-11-16
Zxhn H168n Firmware HIGH 8.8
CVE-2018-7357EPSS 88%

ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper access control vulnerability, wh…

No fix yet
Fix from $1,950 2018-11-14
Zxhn H168n Firmware HIGH 8.8
CVE-2018-7358EPSS 90%

ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper change control vulnerability, wh…

No fix yet
Fix from $1,950 2018-11-14
Zxr10 8905e Firmware HIGH 7.5
CVE-2018-7356

All versions up to V3.03.10.B23P2 of ZTE ZXR10 8905E product are impacted by TCP Initial Sequence Number (ISN) reuse vulnerability, which can generat…

Fix: after 3.03.10.b23p2
Fix from $1,950 2018-11-01
Mf65 Firmware MEDIUM 6.1
CVE-2018-7355

All versions up to V1.0.0B05 of ZTE MF65 and all versions up to V1.0.0B02 of ZTE MF65M1 are impacted by cross-site scripting vulnerability. Due to im…

Fix: after 1.0.0b05
Fix from $1,600 2018-09-26
Zxiptv Epg Firmware CRITICAL 9.8
CVE-2017-10934

All versions prior to V5.09.02.02T4 of the ZTE ZXIPTV-EPG product use the Java RMI service in which the servers use the Apache Commons Collections (A…

Fix: 5.09.02.02t4+
Fix from $2,300 2018-07-25
Zxcdn Sns Firmware HIGH 7.5
CVE-2017-10936

SQL injection vulnerability in all versions prior to V4.01.01 of the ZTE ZXCDN-SNS product allows remote attackers to execute arbitrary SQL commands …

Fix: 4.01.01+
Fix from $1,950 2018-07-25
Zxiptv Ucm Firmware HIGH 7.5
CVE-2017-10937

SQL injection vulnerability in all versions prior to V2.01.05.09 of the ZTE ZXIPTV-UCM product allows remote attackers to execute arbitrary SQL comma…

Fix: 2.01.05.09+
Fix from $1,950 2018-07-25
Zxr10 1800 2s Firmware HIGH 7.2
CVE-2017-10935

All versions prior to ZSRV2 V3.00.40 of the ZTE ZXR10 1800-2S products allow remote authenticated users to bypass the original password authenticatio…

Fix: 3.00.40+
Fix from $1,950 2018-07-25
Zxdsl 831cii Firmware HIGH 7.5
CVE-2017-16953EPSS 11%

connoppp.cgi on ZTE ZXDSL 831CII devices does not require HTTP Basic Authentication, which allows remote attackers to modify the PPPoE configuration …

No fix yet
Fix from $1,950 2017-12-01
Zxdt22 Sf01 Firmware HIGH 7.5
CVE-2017-10933

All versions prior to V2.06.00.00 of ZTE ZXDT22 SF01, an monitoring system of ZTE energy product, are impacted by directory traversal vulnerability t…

Mitigation only
Fix from $1,950 2017-10-19
Nr8120 Firmware CRITICAL 9.8
CVE-2017-10932

All versions prior to V12.17.20 of the ZTE Microwave NR8000 series products - NR8120, NR8120A, NR8120, NR8150, NR8250, NR8000 TR and NR8950 are the a…

Fix: 12.17.20+
Fix from $2,300 2017-09-28
Zxr10 1800 2s Firmware CRITICAL 9.8
CVE-2017-10930

The ZXR10 1800-2S before v3.00.40 incorrectly restricts access to a resource from an unauthorized actor, resulting in ordinary users being able to do…

Fix: 3.00.40+
Fix from $2,300 2017-09-19
Zxr10 1800 2s Firmware HIGH 7.5
CVE-2017-10931

The ZXR10 1800-2S before v3.00.40 incorrectly restricts the download of the file directory range for WEB users, resulting in the ability to download …

Fix: 3.00.40+
Fix from $1,950 2017-09-19
Ox 330p Firmware HIGH 7.5
CVE-2015-7255

ZTE OX-330P, ZXHN H108N, W300V1.0.0S_ZRD_TR1_D68, HG110, GAN9.8T101A-B, MF28G, ZXHN H108N use non-unique X.509 certificates and SSH host keys, which …

Mitigation only
Fix from $1,950 2017-08-29
Zxv10 W300 Firmware HIGH 8.8
CVE-2015-7258EPSS 13%

ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated users to obtain user passwords by displaying …

No fix yet
Fix from $1,950 2017-08-24
Zxv10 W300 Firmware HIGH 8.8
CVE-2015-7259EPSS 9%

ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow user accounts to have multiple valid username and password pairs, …

No fix yet
Fix from $1,950 2017-08-24
Zxv10 W300 Firmware HIGH 7.5
CVE-2015-7257EPSS 7%

ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated non-administrator users to change the admin p…

No fix yet
Fix from $1,950 2017-08-24
Zxhn H108n R1a Firmware MEDIUM 6.5
CVE-2015-8703

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE and ZXV10 W300 devices W300V1.0.0f_ER1_PE allow remote authenticated users to bypass inte…

Mitigation only
Fix from $1,600 2015-12-30
Zxhn H108n R1a Firmware MEDIUM 6.1
CVE-2015-7252

Cross-site scripting (XSS) vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attackers to…

No fix yet
Fix from $1,600 2015-12-30
Zxhn H108n R1a Firmware CRITICAL 9.8
CVE-2015-7251EPSS 11%

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE have a hardcoded password of root for the root account, which allows remote attackers to …

No fix yet
Fix from $2,300 2015-12-30
Zxhn H108n R1a Firmware HIGH 7.5
CVE-2015-7250EPSS 16%

Absolute path traversal vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attackers to re…

No fix yet
Fix from $1,950 2015-12-30