CVE-2015-7255

HIGH

ZTE Ox-330p Firmware - Information Disclosure

Title source: rule
STIX 2.1

Description

ZTE OX-330P, ZXHN H108N, W300V1.0.0S_ZRD_TR1_D68, HG110, GAN9.8T101A-B, MF28G, ZXHN H108N use non-unique X.509 certificates and SSH host keys, which might allow remote attackers to obtain credentials or other sensitive information via a man-in-the-middle attack, passive decryption attack, or impersonating a legitimate device.

References (3)

Core 3
Core References
Mitigation, Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/566724
Third Party Advisory, US Government Resource x_refsource_misc
https://www.kb.cert.org/vuls/id/BLUU-A2NQYR

Scores

CVSS v3 7.5
EPSS 0.0080
EPSS Percentile 74.2%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-200
Status published
Products (6)
zte/gan9.8t101a-b_firmware
zte/hg110_firmware
zte/mf28g_firmware
zte/ox-330p_firmware
zte/w300v1.0.0s_zrd_tr1_d68_firmware
zte/zxhn_h108n_firmware
Published Aug 29, 2017
Tracked Since Feb 18, 2026