zte

194 tracked vulnerabilities.

CVE-2020-6865 MEDIUM
ZTE OSCP V16.19.10 and V16.19.20 - Exposure of Sensitive Information via Error Response
Apr 30, 2020
CVSS 6.5
EPSS 0.00
CVE-2020-6864 MEDIUM
ZTE E8820V3 Firmware < 3.1.0.1000.5 - Information Disclosure
Feb 27, 2020
CVSS 6.5
EPSS 0.00
CVE-2020-6863 MEDIUM
ZTE E8820V3 Firmware < 3.1.0.1000.5 - Permission and Access Control Vulnerability
Feb 27, 2020
CVSS 6.5
EPSS 0.00
CVE-2020-6862 MEDIUM
ZTE F6x2W Firmware V6.0.10P2T2 and V6.0.10P2T5 - Unauthenticated Information Disclosure via CAPTCHA Bypass
Jan 17, 2020
CVSS 5.3
EPSS 0.13
CVE-2019-3431 CRITICAL
ZTE ZXCLOUD GoldenData VAP <= zxivs-vap-portal-xzgav4.01.01.02 - Credential Exposure via Unencrypted Transmission
Dec 23, 2019
CVSS 9.8
EPSS 0.00
CVE-2019-3430 MEDIUM
ZTE ZXCLOUD GoldenData VAP <= zxivs-vap-portal-xzgav4.01.01.02 - Information Disclosure
Dec 23, 2019
CVSS 4.9
EPSS 0.00
CVE-2019-3429 MEDIUM
ZTE ZXCLOUD GoldenData VAP <= V4.01.01.02 - Unauthenticated Sensitive Information Disclosure via Log File
Dec 23, 2019
CVSS 5.3
EPSS 0.00
CVE-2019-3428 MEDIUM
ZTE ZXCDN IAMWEB V6.01.03.01 - Unauthenticated Information Disclosure via HTTP Management Portal
Nov 22, 2019
CVSS 6.5
EPSS 0.00
CVE-2019-3427 HIGH
ZTE ZXCDN IAMWEB V6.01.03.01 - Code Injection
Nov 22, 2019
CVSS 7.2
EPSS 0.00
CVE-2019-3420 MEDIUM
ZTE ZXHN H108N Firmware < 2.5.0_eg1t5_ted - Information Disclosure
Nov 13, 2019
CVSS 6.5
EPSS 0.00
CVE-2019-3426 HIGH
ZTE ZXUPN-9000E Firmware < 9000EV5.0R1B12 - Unauthorized Operations via Input Validation Vulnerability
Nov 08, 2019
CVSS 8.8
EPSS 0.00
CVE-2019-3425 HIGH
ZTE ZXUPN-9000E Firmware < 9000EV5.0R1B12 - Unauthenticated Password Reset via Permission Bypass
Nov 08, 2019
CVSS 8.8
EPSS 0.00
CVE-2019-3422 MEDIUM
ZTE MF910S Firmware - Unauthenticated Sensitive Information Exposure via One-Click Upgrade Tool
Nov 07, 2019
CVSS 6.2
EPSS 0.00
CVE-2019-3419 MEDIUM
ZTE ZXMP M721V3.10P01B10_M2NCP - Denial of Service via Management Port
Oct 31, 2019
CVSS 5.7
EPSS 0.00
CVE-2019-3416 CRITICAL
ZTE ZXV10 B860A Firmware < 81511329.1008 - Unauthenticated Remote Code Execution
Sep 23, 2019
CVSS 9.8
EPSS 0.00
CVE-2019-3418 MEDIUM
ZTE ZXHN F670 Firmware < 1.1.10p3t18 - Authenticated Cross-Site Scripting
Aug 15, 2019
CVSS 5.4
EPSS 0.00
CVE-2019-3417 HIGH
ZTE ZXHN F670 Firmware < 1.1.10p3t18 - Authenticated OS Command Injection
Aug 15, 2019
CVSS 8.8
EPSS 0.02
CVE-2019-3414 MEDIUM
ZTE OTCP Firmware < 1.19.20.02 - Cross-Site Scripting via Security Management Interface
Jul 22, 2019
CVSS 4.8
EPSS 0.00
CVE-2019-3415 MEDIUM
ZTE ZXMW NR8000 Firmware V2.4.4.03 and V2.4.4.04 - Path Traversal
Jul 11, 2019
CVSS 5.7
EPSS 0.00
CVE-2019-3413 MEDIUM
ZTE NetNumen DAP Firmware < 20.18.40.r7.b1 - Cross-Site Scripting
Jun 11, 2019
CVSS 5.4
EPSS 0.00
CVE-2019-3412 CRITICAL
ZTE MF920 Firmware <= BD_R218V2.4 - OS Command Injection via Unverified Interface Parameters
Jun 11, 2019
CVSS 9.8
EPSS 0.01
CVE-2019-3411 HIGH
ZTE MF920 Firmware <= BD_R218V2.4 - Unauthenticated Information Disclosure via WebUI Password Retrieval
Jun 11, 2019
CVSS 7.5
EPSS 0.00
CVE-2019-3410 MEDIUM
ZTE WF820+ LTE Outdoor CPE Firmware < 1.0.0b06 - Cross-Site Request Forgery
Jun 11, 2019
CVSS 4.6
EPSS 0.00
CVE-2019-3409 CRITICAL
ZTE WF820+ LTE Outdoor CPE Firmware < 1.0.0b06 - Unauthenticated OS Command Injection
Jun 11, 2019
CVSS 9.0
EPSS 0.05
CVE-2018-7366 MEDIUM
ZTE ZXV10 B860AV2.1 ChinaMobile Firmware - Authentication Bypass
Dec 28, 2018
CVSS 4.3
EPSS 0.00
Products
zxcloud_irai 13 zxv10_w300_firmware 8 mf971r_firmware 7 zxcloud_goldendb 7 zxhn_f670_firmware 7 mf286r_firmware 6 zxhn_h108n_r1a_firmware 6 goldendb 5 zxhn_h168n_firmware 5 zxr10_1800-2s_firmware 5 zxv10_w300 5 axon_40_ultra_firmware 4 zxdsl 4 zxr10_160_firmware 4 zxr10_2800-4_firmware 4 zxr10_3800-8_firmware 4 ZXCLOUD iRAI 3 blade_a31_firmware 3 blade_a31_plus_firmware 3 blade_a3_lite_firmware 3 blade_a51_firmware 3 blade_a52_firmware 3 blade_a5_2019_firmware 3 blade_a5_2020_firmware 3 blade_a71_firmware 3 blade_a72_firmware 3 blade_a7s_firmware 3 blade_l210_firmware 3 blade_v20_smart_firmware 3 blade_v30_firmware 3
Quick Filters
Critical CVEs With Exploits In CISA KEV