zte Vulnerability Advisory Catalog

Total 180 security vulnerabilities recorded for zte software and firmware.

← Back to All Vendors
Component: blade_a52_firmware

There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could delete some sy...

📅 2023-05-30
CVSS 7.1 Dossier →
Component: blade_a52_firmware

There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could start a non-pu...

📅 2023-05-30
CVSS 3.3 Dossier →
Component: blade_a52_firmware

There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could overwrite some...

📅 2023-05-30
CVSS 7.1 Dossier →
CVE-2022-39073 CRITICAL
Component: mf286r_firmware

There is a command injection vulnerability in ZTE MF286R, Due to insufficient validation of the input parameters, an attacker could use the vulnerabil...

📅 2023-01-06
CVSS 9.8 Dossier →
Component: mf286r_firmware

There is a SQL injection vulnerability in Some ZTE Mobile Internet products. Due to insufficient validation of the input parameters of the SNTP interf...

📅 2023-01-06
CVSS 5.4 Dossier →
Component: zxhn-h108ns_firmware

ZTE ZXHN-H108NS router with firmware version H108NSV1.0.7u_ZRD_GR2_A68 is vulnerable to remote stack buffer overflow....

📅 2022-12-12
CVSS 7.5 Dossier →
Component: otcp_firmware

ZTE OTCP product is impacted by a permission and access control vulnerability. Due to improper permission settings, an attacker with high permissions ...

📅 2022-12-05
CVSS 6.5 Dossier →
CVE-2022-39070 CRITICAL
Component: zxa10_c350m_firmware

There is an access control vulnerability in some ZTE PON OLT products. Due to improper access control settings, remote attackers could use the vulnera...

📅 2022-11-22
CVSS 9.8 Dossier →
Component: mf286r_firmware

There is a buffer overflow vulnerability in ZTE MF286R. Due to lack of input validation on parameters of the wifi interface, an authenticated attacker...

📅 2022-11-22
CVSS 6.5 Dossier →
Component: mf286r_firmware

There is a SQL injection vulnerability in ZTE MF286R. Due to insufficient validation of the input parameters of the phonebook interface, an authentica...

📅 2022-11-22
CVSS 8.8 Dossier →
Component: zaip-aie

There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by buildi...

📅 2022-11-08
CVSS 5.3 Dossier →
CVE-2022-23144 CRITICAL
Component: zxa10_b76hv3_firmware

There is a broken access control vulnerability in ZTE ZXvSTB product. Due to improper permission control, attackers could use this vulnerability to de...

📅 2022-09-23
CVSS 9.1 Dossier →
Component: zxen_cg200_firmware

ZXEN CG200 has a DoS vulnerability. An attacker could construct and send a large number of HTTP GET requests in a short time, which can make the produ...

📅 2022-07-18
CVSS 5.3 Dossier →
Component: zxmp_m721_firmware

ZXMP M721 has an information leak vulnerability. Since the serial port authentication on the ZBOOT interface is not effective although it is enabled, ...

📅 2022-07-15
CVSS 7.5 Dossier →
Component: mf297d_firmware

ZTE's MF297D product has cryptographic issues vulnerability. Due to the use of weak random values, the security of the device is reduced, and it may f...

📅 2022-06-09
CVSS 7.5 Dossier →
Component: zxmp_m721_firmware

ZTE's ZXMP M721 product has a permission and access control vulnerability. Since the folder permission viewed by sftp is 666, which is inconsistent wi...

📅 2022-05-12
CVSS 8.8 Dossier →
Component: zxcdn_firmware

ZTE's ZXCDN product has a reflective XSS vulnerability. The attacker could modify the parameters in the content clearing request url, and when a user ...

📅 2022-05-11
CVSS 6.1 Dossier →
Component: zxhn_f680_firmware

There is a stored XSS vulnerability in ZTE home gateway product. An attacker could modify the gateway name by inserting special characters and trigger...

📅 2022-03-30
CVSS 5.4 Dossier →
Component: zxhn_f677_firmware

There is a directory traversal vulnerability in some home gateway products of ZTE. Due to the lack of verification of user modified destination path, ...

📅 2022-02-24
CVSS 6.5 Dossier →
Component: zxin10_cms

ZTE BigVideo analysis product has an input verification vulnerability. Due to the inconsistency between the front and back verifications when configur...

📅 2021-12-27
CVSS 8.1 Dossier →
Component: zxin10_cms

ZTE BigVideo Analysis product has a privilege escalation vulnerability. Due to improper management of the timed task modification privilege, an attack...

📅 2021-12-27
CVSS 7.8 Dossier →
CVE-2021-21749 CRITICAL
Component: mf971r_firmware

ZTE MF971R product has two stack-based buffer overflow vulnerabilities. An attacker could exploit the vulnerabilities to execute arbitrary code....

📅 2021-10-20
CVSS 9.8 Dossier →
CVE-2021-21748 CRITICAL
Component: mf971r_firmware

ZTE MF971R product has two stack-based buffer overflow vulnerabilities. An attacker could exploit the vulnerabilities to execute arbitrary code....

📅 2021-10-20
CVSS 9.8 Dossier →
Component: mf971r_firmware

ZTE MF971R product has a Referer authentication bypass vulnerability. Without CSRF verification, an attackercould use this vulnerability to perform il...

📅 2021-10-20
CVSS 4.3 Dossier →
Page 3 of 8 (180 Total Records)