zte Vulnerability Advisory Catalog

Total 180 security vulnerabilities recorded for zte software and firmware.

← Back to All Vendors
CVE-2019-3429 MEDIUM
Component: zxcloud_goldendata_vap

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have a file reading vulnerability. Attackers could obtain log file information wi...

📅 2019-12-23
CVSS 5.3 Dossier →
CVE-2019-3428 MEDIUM
Component: zxcdn_iamweb_firmware

The version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a configuration error vulnerability. An attacker could directly access the manageme...

📅 2019-11-22
CVSS 6.5 Dossier →
Component: zxcdn_iamweb_firmware

The version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a code injection vulnerability. An attacker could exploit the vulnerability to inje...

📅 2019-11-22
CVSS 7.2 Dossier →
CVE-2019-3420 MEDIUM
Component: zxhn_h108n_firmware

All versions up to V2.5.0_EG1T5_TED of ZTE ZXHN H108N product are impacted by an information leak vulnerability. An attacker could exploit the vulnera...

📅 2019-11-13
CVSS 6.5 Dossier →
Component: zxupn-9000e_firmware

The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by the input validation vulnerability. An attacker could ...

📅 2019-11-08
CVSS 8.8 Dossier →
Component: zxupn-9000e_firmware

The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by vulnerability of permission and access control. An att...

📅 2019-11-08
CVSS 8.8 Dossier →
CVE-2019-3422 MEDIUM
Component: mf910s_firmware

The Sec Consult Security Lab reported an information disclosure vulnerability in MF910S product to ZTE PSIRT in October 2019. Through the analysis of ...

📅 2019-11-07
CVSS 6.2 Dossier →
CVE-2019-3419 MEDIUM
Component: zxmp_m721_dx_firmware

A security vulnerability exists in a management port in the version of ZTE's ZXMP M721V3.10P01B10_M2NCP. An attacker could exploit this vulnerability ...

📅 2019-10-31
CVSS 5.7 Dossier →
CVE-2019-3416 CRITICAL
Component: zxv10_b860a_firmware

All versions up to V81511329.1008 of ZTE ZXV10 B860A products are impacted by input validation vulnerability. Due to input validation, unauthorized us...

📅 2019-09-23
CVSS 9.8 Dossier →
CVE-2019-3418 MEDIUM
Component: zxhn_f670_firmware

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by cross-site scripting vulnerability (XSS). Due to incomplete input validation,...

📅 2019-08-15
CVSS 5.4 Dossier →
Component: zxhn_f670_firmware

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by command injection vulnerability. Due to insufficient parameter validation che...

📅 2019-08-15
CVSS 8.8 Dossier →
CVE-2019-3414 MEDIUM
Component: otcp_firmware

All versions up to V1.19.20.02 of ZTE OTCP product are impacted by XSS vulnerability. Due to XSS, when an attacker invokes the security management to ...

📅 2019-07-22
CVSS 4.8 Dossier →
CVE-2019-3415 MEDIUM
Component: zxmw_nr8000_firmware

ZTE MW NR8000V2.4.4.03 and NR8000V2.4.4.04 are impacted by path traversal vulnerability. Due to path traversal,users can download any files....

📅 2019-07-11
CVSS 5.7 Dossier →
CVE-2019-3413 MEDIUM
Component: netnumen_dap_firmware

All versions up to V20.18.40.R7.B1of ZTE NetNumen DAP product have an XSS vulnerability. Due to the lack of correct validation of client data in WEB a...

📅 2019-06-11
CVSS 5.4 Dossier →
CVE-2019-3412 CRITICAL
Component: mf920_firmware

All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by command execution vulnerability. Due to some interfaces do not adequately verify p...

📅 2019-06-11
CVSS 9.8 Dossier →
Component: mf920_firmware

All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by information leak vulnerability. Due to some interfaces can obtain the WebUI login ...

📅 2019-06-11
CVSS 7.5 Dossier →
CVE-2019-3410 MEDIUM
Component: wf820\+_lte_outdoor_cpe_firmware

All versions up to UKBB_WF820+_1.0.0B06 of ZTE WF820+ LTE Outdoor CPE product are impacted by Cross-Site Request Forgery vulnerability,which stems fro...

📅 2019-06-11
CVSS 4.6 Dossier →
CVE-2019-3409 CRITICAL
Component: wf820\+_lte_outdoor_cpe_firmware

All versions up to UKBB_WF820+_1.0.0B06 of ZTE WF820+ LTE Outdoor CPE product are impacted by command injection vulnerability. Due to inadequate param...

📅 2019-06-11
CVSS 9.0 Dossier →
CVE-2018-7366 MEDIUM
Component: zxv10_b860av2.1_chinamobile_firmware

ZTE ZXV10 B860AV2.1 product ChinaMobile branch with the ICNT versions up to V1.3.3, the BESTV versions up to V1.2.2, the WASU versions up to V1.1.7 an...

📅 2018-12-28
CVSS 4.3 Dossier →
CVE-2018-7365 MEDIUM
Component: zxcloud_irai

All versions up to ZXCLOUD iRAI V5.01.05 of the ZTE uSmartView product are impacted by untrusted search path vulnerability, which may allow an unautho...

📅 2018-12-20
CVSS 5.1 Dossier →
CVE-2018-7364 CRITICAL
Component: zxin10

All versions up to ZXINOS-RESV1.01.43 of the ZTE ZXIN10 product European region are impacted by improper access control vulnerability. Due to improper...

📅 2018-12-07
CVSS 9.8 Dossier →
CVE-2018-7363 MEDIUM
Component: zxhn_f670_firmware

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper authorization vulnerability. Since appviahttp service has no authori...

📅 2018-11-16
CVSS 4.3 Dossier →
Component: zxhn_f670_firmware

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper access control vulnerability, which may allows an unauthorized user ...

📅 2018-11-16
CVSS 7.5 Dossier →
CVE-2018-7361 MEDIUM
Component: zxhn_f670_firmware

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by null pointer dereference vulnerability, which may allows an attacker to cause...

📅 2018-11-16
CVSS 6.5 Dossier →
Page 6 of 8 (180 Total Records)