Total 180 security vulnerabilities recorded for zte software and firmware.
ZTE MF971R product has a configuration file control vulnerability. An attacker could use this vulnerability to modify the configuration parameters of ...
ZTE MF971R product has a CRLF injection vulnerability. An attacker could exploit the vulnerability to modify the HTTP response header information thro...
ZTE MF971R product has reflective XSS vulnerability. An attacker could use the vulnerability to obtain cookie information....
ZTE MF971R product has reflective XSS vulnerability. An attacker could use the vulnerability to obtain cookie information....
There is an information leak vulnerability in the message service app of a ZTE mobile phone. Due to improper parameter settings, attackers could use t...
There is a command execution vulnerability in a ZTE conference management system. As some services are enabled by default, the attacker could exploit ...
There is an information leak vulnerability in the digital media player (DMS) of ZTE's residential gateway product. The attacker could insert the USB d...
A ZTE's product of the transport network access layer has a security vulnerability. Because the system does not sufficiently verify the data reliabili...
ZTE's big video business platform has two reflective cross-site scripting (XSS) vulnerabilities. Due to insufficient input verification, the attacker ...
A smart STB product of ZTE is impacted by a permission and access control vulnerability. Due to insufficient protection of system application, attacke...
A smart camera product of ZTE is impacted by a permission and access control vulnerability. Due to the defect of user permission management by the clo...
A ZTE product has an information leak vulnerability. Due to improper permission settings, an attacker with ordinary user permissions could exploit thi...
Some PON MDU devices of ZTE stored sensitive information in plaintext, and users with login authority can obtain it by inputing command. This affects:...
The management system of ZXCDN is impacted by the information leak vulnerability. Attackers can make further analysis according to the information ret...
A mobile phone of ZTE is impacted by improper access control vulnerability. Due to improper permission settings, third-party applications can read som...
A CSRF vulnerability exists in the management page of a ZTE product.The vulnerability is caused because the management page does not fully verify whet...
A ZTE product is impacted by improper access control vulnerability. The attacker could exploit this vulnerability to access CLI by brute force attacks...
Some ZTE products have CSRF vulnerability. Because some pages lack CSRF random value verification, attackers could perform illegal authorization opera...
A ZTE product has a configuration error vulnerability. Because a certain port is open by default, an attacker can consume system processing resources ...
A ZTE product has a DoS vulnerability. A remote attacker can amplify traffic by sending carefully constructed IPv6 packets to the affected devices, wh...
Some ZTE products have an input verification vulnerability in the diagnostic function interface. Due to insufficient verification of some parameters i...
A ZTE product has an information leak vulnerability. An attacker with higher authority can go beyond their authority to access files in other director...
A ZTE product has a memory leak vulnerability. Due to the product's improper handling of memory release in certain scenarios, a local attacker with de...
Some ZTE products have a DoS vulnerability. Due to the improper handling of memory release in some specific scenarios, a remote attacker can trigger t...