zte Vulnerability Advisory Catalog

Total 180 security vulnerabilities recorded for zte software and firmware.

← Back to All Vendors
Component: zxv10_b860a_firmware

A ZTE Smart STB is impacted by an information leak vulnerability. The device did not fully verify the log, so attackers could use this vulnerability t...

📅 2021-01-14
CVSS 4.4 Dossier →
Component: zxhn_e8810_firmware

ZTE E8810/E8820/E8822 series routers have an information leak vulnerability, which is caused by hard-coded MQTT service access credentials on the devi...

📅 2020-12-21
CVSS 7.5 Dossier →
Component: zxhn_e8810_firmware

ZTE E8810/E8820/E8822 series routers have an MQTT DoS vulnerability, which is caused by the failure of the device to verify the validity of abnormal m...

📅 2020-12-21
CVSS 7.5 Dossier →
CVE-2020-6880 CRITICAL
Component: zxv10_w908_firmware

A ZXELINK wireless controller has a SQL injection vulnerability. A remote attacker does not need to log in. By sending malicious SQL statements, becau...

📅 2020-12-01
CVSS 9.8 Dossier →
Component: zxhn_z500_firmware

Some ZTE devices have input verification vulnerabilities. The devices support configuring a static prefix through the web management page. The restric...

📅 2020-11-19
CVSS 3.5 Dossier →
Component: zxa10_eodn_firmware

A ZTE product is impacted by an information leak vulnerability. An attacker could use this vulnerability to obtain the authentication password of the ...

📅 2020-11-05
CVSS 8.8 Dossier →
CVE-2020-6876 MEDIUM
Component: evdc

A ZTE product is impacted by an XSS vulnerability. The vulnerability is caused by the lack of correct verification of client data in the WEB module. B...

📅 2020-10-26
CVSS 5.4 Dossier →
CVE-2020-6875 CRITICAL
Component: zxone_19700_snpe_firmware

A ZTE product is impacted by the improper access control vulnerability. Due to lack of an authentication protection mechanism in the program, attacker...

📅 2020-10-05
CVSS 9.8 Dossier →
CVE-2020-6874 CRITICAL
Component: zxiptv_firmware

A ZTE product is impacted by the cryptographic issues vulnerability. The encryption algorithm is not properly used, so remote attackers could use this...

📅 2020-09-01
CVSS 9.1 Dossier →
CVE-2020-6873 MEDIUM
Component: zxr10_2800-4_almpufb\(low\)_firmware

A ZTE product has a DoS vulnerability. Because the equipment couldn’t distinguish the attack packets and normal packets with valid http links, the rem...

📅 2020-09-01
CVSS 5.3 Dossier →
CVE-2020-6872 MEDIUM
Component: r8500g4_firmware

The server management software module of ZTE has a storage XSS vulnerability. The attacker inserts some attack codes through the foreground login page...

📅 2020-07-20
CVSS 6.1 Dossier →
CVE-2020-6871 CRITICAL
Component: r8500g4_firmware

The server management software module of ZTE has an authentication issue vulnerability, which allows users to skip the authentication of the server an...

📅 2020-07-20
CVSS 9.8 Dossier →
Component: netnumen_u31_r10_firmware

The version V12.17.20T115 of ZTE U31R20 product is impacted by a design error vulnerability. An attacker could exploit the vulnerability to log in to ...

📅 2020-06-24
CVSS 8.0 Dossier →
Component: ztemarket_apk

All versions up to 10.06 of ZTEMarket APK are impacted by an information leak vulnerability. Due to Activity Component exposure users can exploit this...

📅 2020-06-17
CVSS 8.1 Dossier →
CVE-2020-6868 MEDIUM
Component: f680_firmware

There is an input validation vulnerability in a PON terminal product of ZTE, which supports the creation of WAN connections through WEB management pag...

📅 2020-06-01
CVSS 6.5 Dossier →
CVE-2020-6867 MEDIUM
Component: zenic_one_r22b

ZTE's SDON controller is impacted by the resource management error vulnerability. When RPC is frequently called by other applications in the case of m...

📅 2020-04-30
CVSS 5.5 Dossier →
CVE-2020-6866 MEDIUM
Component: zxctn_6500_firmware

A ZTE product is impacted by a resource management error vulnerability. An attacker could exploit this vulnerability to cause a denial of service by i...

📅 2020-04-30
CVSS 4.9 Dossier →
CVE-2020-6865 MEDIUM
Component: oscp

ZTE SDN controller platform is impacted by an information leakage vulnerability. Due to the program's failure to optimize the response of failure to t...

📅 2020-04-30
CVSS 6.5 Dossier →
CVE-2020-6864 MEDIUM
Component: e8820v3_firmware

ZTE E8820V3 router product is impacted by an information leak vulnerability. Attackers could use this vulnerability to to gain wireless passwords. Aft...

📅 2020-02-27
CVSS 6.5 Dossier →
CVE-2020-6863 MEDIUM
Component: e8820v3_firmware

ZTE E8820V3 router product is impacted by a permission and access control vulnerability. Attackers could use this vulnerability to tamper with DDNS pa...

📅 2020-02-27
CVSS 6.5 Dossier →
Component: zxv10_w300_firmware

ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficient access control, which allows ...

📅 2020-02-20
CVSS 7.5 Dossier →
CVE-2020-6862 MEDIUM
Component: f6x2w_firmware

V6.0.10P2T2 and V6.0.10P2T5 of F6x2W product are impacted by Information leak vulnerability. Unauthorized users could log in directly to obtain page i...

📅 2020-01-17
CVSS 5.3 Dossier →
CVE-2019-3431 CRITICAL
Component: zxcloud_goldendata_vap

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have encryption problems vulnerability. Attackers could sniff unencrypted account...

📅 2019-12-23
CVSS 9.8 Dossier →
CVE-2019-3430 MEDIUM
Component: zxcloud_goldendata_vap

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have an information disclosure vulnerability. Attackers could use this vulnerabil...

📅 2019-12-23
CVSS 4.9 Dossier →
Page 5 of 8 (180 Total Records)