zte Vulnerability Advisory Catalog

Total 180 security vulnerabilities recorded for zte software and firmware.

← Back to All Vendors
Component: zxhn_h108n_r1a_firmware

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote attackers to discover usernames and password hashes by reading the cgi-bin/we...

📅 2015-12-30
CVSS 7.5 Dossier →
CVE-2014-9184 UNKNOWN
Component: zxdsl

ZTE ZXDSL 831CII allows remote attackers to bypass authentication via a direct request to (1) main.cgi, (2) adminpasswd.cgi, (3) userpasswd.cgi, (4) u...

📅 2014-12-02
CVSS 5.0 Dossier →
CVE-2014-9183 UNKNOWN
Component: zxdsl

ZTE ZXDSL 831CII has a default password of admin for the admin account, which allows remote attackers to gain administrator privileges....

📅 2014-12-02
CVSS 10.0 Dossier →
CVE-2014-9020 UNKNOWN
Component: zxdsl_831

Cross-site scripting (XSS) vulnerability in the Quick Stats page (psilan.cgi) in ZTE ZXDSL 831 and 831CII allows remote attackers to inject arbitrary ...

📅 2014-11-20
CVSS 4.3 Dossier →
CVE-2014-9019 UNKNOWN
Component: zxdsl

Multiple cross-site request forgery (CSRF) vulnerabilities in ZTE ZXDSL 831CII allow remote attackers to hijack the authentication of administrators f...

📅 2014-11-20
CVSS 6.8 Dossier →
CVE-2014-8493 UNKNOWN
Component: zxhn_h108l_firmware

ZTE ZXHN H108L with firmware 4.0.0d_ZRQ_GR4 allows remote attackers to modify the CWMP configuration via a crafted request to Forms/access_cwmp_1....

📅 2014-11-20
CVSS 5.0 Dossier →
CVE-2014-4154 UNKNOWN
Component: zxv10_w300_firmware

ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficient access control, which allows ...

📅 2014-07-16
CVSS 5.0 Dossier →
CVE-2014-4018 UNKNOWN
Component: zxv10_w300_firmware

The ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK has a default password of admin for the admin account, which makes it easier for remote att...

📅 2014-07-16
CVSS 7.8 Dossier →
CVE-2014-4155 UNKNOWN
Component: zxv10_w300_firmware

Cross-site request forgery (CSRF) vulnerability in the ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK allows remote attackers to hijack the au...

📅 2014-06-19
CVSS 6.8 Dossier →
CVE-2014-2321 UNKNOWN
Component: f460

web_shell_cmd.gch on ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests, as demonstrated by u...

📅 2014-03-11
CVSS 10.0 Dossier →
CVE-2014-0329 UNKNOWN
Component: zxv10_w300

The TELNET service on the ZTE ZXV10 W300 router 2.1.0 has a hardcoded password ending with airocon for the admin account, which allows remote attacker...

📅 2014-02-04
CVSS 9.3 Dossier →
CVE-2012-4746 UNKNOWN
Component: zxdsl

Cross-site request forgery (CSRF) vulnerability in accessaccount.cgi in ZTE ZXDSL 831IIV7.5.0a_Z29_OV allows remote attackers to hijack the authentica...

📅 2012-08-31
CVSS 6.8 Dossier →
Page 8 of 8 (180 Total Records)