Browse CVEs

CRITICAL 9.1 CVE-2020-6874 A ZTE product is impacted by the cryptographic issues vulnerability. The encryption algorithm is not properly used, so remote attackers could use thi… Zxiptv Firmware Mitigation only Fix from $2,3002020-09-01 MEDIUM 5.3 CVE-2020-6873 A ZTE product has a DoS vulnerability. Because the equipment couldn’t distinguish the attack packets and normal packets with valid http links, the re… Zxr10 2800 4 Almpufb\(low\) Firmware after 3.00.40 Fix from $1,6002020-09-01 CRITICAL 9.8 CVE-2020-6871 The server management software module of ZTE has an authentication issue vulnerability, which allows users to skip the authentication of the server a… R8500g4 Firmware Mitigation only Fix from $2,3002020-07-20 MEDIUM 6.1 CVE-2020-6872 The server management software module of ZTE has a storage XSS vulnerability. The attacker inserts some attack codes through the foreground login pag… R8500g4 Firmware Mitigation only Fix from $1,6002020-07-20 HIGH 8.0 CVE-2020-6870 The version V12.17.20T115 of ZTE U31R20 product is impacted by a design error vulnerability. An attacker could exploit the vulnerability to log in to… Netnumen U31 R10 Firmware Mitigation only Fix from $1,9502020-06-24 HIGH 8.1 CVE-2020-6869 All versions up to 10.06 of ZTEMarket APK are impacted by an information leak vulnerability. Due to Activity Component exposure users can exploit thi… Ztemarket Apk after 10.06 Fix from $1,9502020-06-17 MEDIUM 6.5 CVE-2020-6868 There is an input validation vulnerability in a PON terminal product of ZTE, which supports the creation of WAN connections through WEB management pa… F680 Firmware Mitigation only Fix from $1,6002020-06-01 MEDIUM 6.5 CVE-2020-6865 ZTE SDN controller platform is impacted by an information leakage vulnerability. Due to the program's failure to optimize the response of failure to … Oscp Mitigation only Fix from $1,6002020-04-30 MEDIUM 5.5 CVE-2020-6867 ZTE's SDON controller is impacted by the resource management error vulnerability. When RPC is frequently called by other applications in the case of … Zenic One R22b Mitigation only Fix from $1,6002020-04-30 MEDIUM 6.5 CVE-2020-6863 ZTE E8820V3 router product is impacted by a permission and access control vulnerability. Attackers could use this vulnerability to tamper with DDNS p… E8820v3 Firmware 3.1.0.1000.5+ Fix from $1,6002020-02-27 MEDIUM 6.5 CVE-2020-6864 ZTE E8820V3 router product is impacted by an information leak vulnerability. Attackers could use this vulnerability to to gain wireless passwords. Af… E8820v3 Firmware 3.1.0.1000.5+ Fix from $1,6002020-02-27 HIGH 7.5 CVE-2014-4019EPSS 13% ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficient access control, which allows… Zxv10 W300 Firmware No fix yet Fix from $1,9502020-02-20 MEDIUM 5.3 CVE-2020-6862EPSS 6% V6.0.10P2T2 and V6.0.10P2T5 of F6x2W product are impacted by Information leak vulnerability. Unauthorized users could log in directly to obtain page … F6x2w Firmware No fix yet Fix from $1,6002020-01-17 CRITICAL 9.8 CVE-2019-3431 All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have encryption problems vulnerability. Attackers could sniff unencrypted accoun… Zxcloud Goldendata Vap Mitigation only Fix from $2,3002019-12-23 MEDIUM 5.3 CVE-2019-3429 All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have a file reading vulnerability. Attackers could obtain log file information w… Zxcloud Goldendata Vap Mitigation only Fix from $1,6002019-12-23 HIGH 7.2 CVE-2019-3427 The version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a code injection vulnerability. An attacker could exploit the vulnerability to inj… Zxcdn Iamweb Firmware Mitigation only Fix from $1,9502019-11-22 MEDIUM 6.5 CVE-2019-3428 The version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a configuration error vulnerability. An attacker could directly access the managem… Zxcdn Iamweb Firmware Mitigation only Fix from $1,6002019-11-22 MEDIUM 6.5 CVE-2019-3420 All versions up to V2.5.0_EG1T5_TED of ZTE ZXHN H108N product are impacted by an information leak vulnerability. An attacker could exploit the vulner… Zxhn H108n Firmware after 2.5.0_eg1t5_ted Fix from $1,6002019-11-13 HIGH 8.8 CVE-2019-3425 The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by vulnerability of permission and access control. An at… Zxupn 9000e Firmware 9000ev5.0r1b12+ Fix from $1,9502019-11-08 HIGH 8.8 CVE-2019-3426 The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by the input validation vulnerability. An attacker could… Zxupn 9000e Firmware 9000ev5.0r1b12+ Fix from $1,9502019-11-08 MEDIUM 6.2 CVE-2019-3422 The Sec Consult Security Lab reported an information disclosure vulnerability in MF910S product to ZTE PSIRT in October 2019. Through the analysis of… Mf910s Firmware No fix yet Fix from $1,6002019-11-07 MEDIUM 5.7 CVE-2019-3419 A security vulnerability exists in a management port in the version of ZTE's ZXMP M721V3.10P01B10_M2NCP. An attacker could exploit this vulnerability… Zxmp M721 Dx Firmware Mitigation only Fix from $1,6002019-10-31 CRITICAL 9.8 CVE-2019-3416 All versions up to V81511329.1008 of ZTE ZXV10 B860A products are impacted by input validation vulnerability. Due to input validation, unauthorized u… Zxv10 B860a Firmware after 81511329.1008 Fix from $2,3002019-09-23 HIGH 8.8 CVE-2019-3417 All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by command injection vulnerability. Due to insufficient parameter validation ch… Zxhn F670 Firmware after 1.1.10p3t18 Fix from $1,9502019-08-15 MEDIUM 5.4 CVE-2019-3418 All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by cross-site scripting vulnerability (XSS). Due to incomplete input validation… Zxhn F670 Firmware after 1.1.10p3t18 Fix from $1,6002019-08-15 MEDIUM 5.7 CVE-2019-3415 ZTE MW NR8000V2.4.4.03 and NR8000V2.4.4.04 are impacted by path traversal vulnerability. Due to path traversal,users can download any files. Zxmw Nr8000 Firmware Mitigation only Fix from $1,6002019-07-11 CRITICAL 9.8 CVE-2019-3412 All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by command execution vulnerability. Due to some interfaces do not adequately verify … Mf920 Firmware Mitigation only Fix from $2,3002019-06-11 HIGH 7.5 CVE-2019-3411 All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by information leak vulnerability. Due to some interfaces can obtain the WebUI login… Mf920 Firmware Mitigation only Fix from $1,9502019-06-11 MEDIUM 5.4 CVE-2019-3413 All versions up to V20.18.40.R7.B1of ZTE NetNumen DAP product have an XSS vulnerability. Due to the lack of correct validation of client data in WEB … Netnumen Dap Firmware after 20.18.40.r7.b1 Fix from $1,6002019-06-11 HIGH 8.8 CVE-2019-3409 All versions up to UKBB_WF820+_1.0.0B06 of ZTE WF820+ LTE Outdoor CPE product are impacted by command injection vulnerability. Due to inadequate para… Wf820\+ Lte Outdoor Cpe Firmware 1.0.0b06+ Fix from $1,9502019-06-11