Browse CVEs

HIGH 8.8 CVE-2019-3410 All versions up to UKBB_WF820+_1.0.0B06 of ZTE WF820+ LTE Outdoor CPE product are impacted by Cross-Site Request Forgery vulnerability,which stems fr… Wf820\+ Lte Outdoor Cpe Firmware 1.0.0b06+ Fix from $1,9502019-06-11 MEDIUM 6.8 CVE-2018-7366 ZTE ZXV10 B860AV2.1 product ChinaMobile branch with the ICNT versions up to V1.3.3, the BESTV versions up to V1.2.2, the WASU versions up to V1.1.7 a… Zxv10 B860av2.1 Chinamobile Firmware Mitigation only Fix from $1,6002018-12-28 HIGH 7.2 CVE-2018-7365 All versions up to ZXCLOUD iRAI V5.01.05 of the ZTE uSmartView product are impacted by untrusted search path vulnerability, which may allow an unauth… Zxcloud Irai after 5.01.05 Fix from $1,9502018-12-20 CRITICAL 9.8 CVE-2018-7364EPSS 10% All versions up to ZXINOS-RESV1.01.43 of the ZTE ZXIN10 product European region are impacted by improper access control vulnerability. Due to imprope… Zxin10 No fix yet Fix from $2,3002018-12-07 CRITICAL 9.8 CVE-2018-7359 All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by heap-based buffer overflow vulnerability, which may allow an attacker to exe… Zxhn F670 Firmware after 1.1.10p3t18 Fix from $2,3002018-11-16 HIGH 8.8 CVE-2018-7362 All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper access control vulnerability, which may allows an unauthorized user… Zxhn F670 Firmware 1.1.10p3t18+ Fix from $1,9502018-11-16 HIGH 8.8 CVE-2018-7363 All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper authorization vulnerability. Since appviahttp service has no author… Zxhn F670 Firmware 1.1.10p3t18+ Fix from $1,9502018-11-16 MEDIUM 6.5 CVE-2018-7360 All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by information exposure vulnerability, which may allow an unauthenticated attac… Zxhn F670 Firmware 1.1.10p3t18+ Fix from $1,6002018-11-16 MEDIUM 6.5 CVE-2018-7361 All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by null pointer dereference vulnerability, which may allows an attacker to caus… Zxhn F670 Firmware after 1.1.10p3t18 Fix from $1,6002018-11-16 HIGH 8.8 CVE-2018-7357EPSS 88% ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper access control vulnerability, wh… Zxhn H168n Firmware No fix yet Fix from $1,9502018-11-14 HIGH 8.8 CVE-2018-7358EPSS 90% ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper change control vulnerability, wh… Zxhn H168n Firmware No fix yet Fix from $1,9502018-11-14 HIGH 7.5 CVE-2018-7356 All versions up to V3.03.10.B23P2 of ZTE ZXR10 8905E product are impacted by TCP Initial Sequence Number (ISN) reuse vulnerability, which can generat… Zxr10 8905e Firmware after 3.03.10.b23p2 Fix from $1,9502018-11-01 MEDIUM 6.1 CVE-2018-7355 All versions up to V1.0.0B05 of ZTE MF65 and all versions up to V1.0.0B02 of ZTE MF65M1 are impacted by cross-site scripting vulnerability. Due to im… Mf65 Firmware after 1.0.0b05 Fix from $1,6002018-09-26 CRITICAL 9.8 CVE-2017-10934 All versions prior to V5.09.02.02T4 of the ZTE ZXIPTV-EPG product use the Java RMI service in which the servers use the Apache Commons Collections (A… Zxiptv Epg Firmware 5.09.02.02t4+ Fix from $2,3002018-07-25 HIGH 7.5 CVE-2017-10936 SQL injection vulnerability in all versions prior to V4.01.01 of the ZTE ZXCDN-SNS product allows remote attackers to execute arbitrary SQL commands … Zxcdn Sns Firmware 4.01.01+ Fix from $1,9502018-07-25 HIGH 7.5 CVE-2017-10937 SQL injection vulnerability in all versions prior to V2.01.05.09 of the ZTE ZXIPTV-UCM product allows remote attackers to execute arbitrary SQL comma… Zxiptv Ucm Firmware 2.01.05.09+ Fix from $1,9502018-07-25 HIGH 7.2 CVE-2017-10935 All versions prior to ZSRV2 V3.00.40 of the ZTE ZXR10 1800-2S products allow remote authenticated users to bypass the original password authenticatio… Zxr10 1800 2s Firmware 3.00.40+ Fix from $1,9502018-07-25 HIGH 7.5 CVE-2017-16953EPSS 11% connoppp.cgi on ZTE ZXDSL 831CII devices does not require HTTP Basic Authentication, which allows remote attackers to modify the PPPoE configuration … Zxdsl 831cii Firmware No fix yet Fix from $1,9502017-12-01 HIGH 7.5 CVE-2017-10933 All versions prior to V2.06.00.00 of ZTE ZXDT22 SF01, an monitoring system of ZTE energy product, are impacted by directory traversal vulnerability t… Zxdt22 Sf01 Firmware Mitigation only Fix from $1,9502017-10-19 CRITICAL 9.8 CVE-2017-10932 All versions prior to V12.17.20 of the ZTE Microwave NR8000 series products - NR8120, NR8120A, NR8120, NR8150, NR8250, NR8000 TR and NR8950 are the a… Nr8120 Firmware 12.17.20+ Fix from $2,3002017-09-28 CRITICAL 9.8 CVE-2017-10930 The ZXR10 1800-2S before v3.00.40 incorrectly restricts access to a resource from an unauthorized actor, resulting in ordinary users being able to do… Zxr10 1800 2s Firmware 3.00.40+ Fix from $2,3002017-09-19 HIGH 7.5 CVE-2017-10931 The ZXR10 1800-2S before v3.00.40 incorrectly restricts the download of the file directory range for WEB users, resulting in the ability to download … Zxr10 1800 2s Firmware 3.00.40+ Fix from $1,9502017-09-19 HIGH 7.5 CVE-2015-7255 ZTE OX-330P, ZXHN H108N, W300V1.0.0S_ZRD_TR1_D68, HG110, GAN9.8T101A-B, MF28G, ZXHN H108N use non-unique X.509 certificates and SSH host keys, which … Ox 330p Firmware Mitigation only Fix from $1,9502017-08-29 HIGH 8.8 CVE-2015-7258EPSS 13% ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated users to obtain user passwords by displaying … Zxv10 W300 Firmware No fix yet Fix from $1,9502017-08-24 HIGH 8.8 CVE-2015-7259EPSS 9% ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow user accounts to have multiple valid username and password pairs, … Zxv10 W300 Firmware No fix yet Fix from $1,9502017-08-24 HIGH 7.5 CVE-2015-7257EPSS 7% ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated non-administrator users to change the admin p… Zxv10 W300 Firmware No fix yet Fix from $1,9502017-08-24 MEDIUM 6.5 CVE-2015-8703 ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE and ZXV10 W300 devices W300V1.0.0f_ER1_PE allow remote authenticated users to bypass inte… Zxhn H108n R1a Firmware Mitigation only Fix from $1,6002015-12-30 MEDIUM 6.1 CVE-2015-7252 Cross-site scripting (XSS) vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attackers to… Zxhn H108n R1a Firmware No fix yet Fix from $1,6002015-12-30 CRITICAL 9.8 CVE-2015-7251EPSS 11% ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE have a hardcoded password of root for the root account, which allows remote attackers to … Zxhn H108n R1a Firmware No fix yet Fix from $2,3002015-12-30 HIGH 7.5 CVE-2015-7250EPSS 16% Absolute path traversal vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attackers to re… Zxhn H108n R1a Firmware No fix yet Fix from $1,9502015-12-30