CVE-2015-7255
HIGHZTE Ox-330p Firmware - Information Disclosure
Title source: ruleDescription
ZTE OX-330P, ZXHN H108N, W300V1.0.0S_ZRD_TR1_D68, HG110, GAN9.8T101A-B, MF28G, ZXHN H108N use non-unique X.509 certificates and SSH host keys, which might allow remote attackers to obtain credentials or other sensitive information via a man-in-the-middle attack, passive decryption attack, or impersonating a legitimate device.
Scores
CVSS v3
7.5
EPSS
0.0080
EPSS Percentile
73.8%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Classification
CWE
CWE-200
Status
draft
Affected Products (6)
zte/ox-330p_firmware
zte/zxhn_h108n_firmware
zte/w300v1.0.0s_zrd_tr1_d68_firmware
zte/hg110_firmware
zte/gan9.8t101a-b_firmware
zte/mf28g_firmware
Timeline
Published
Aug 29, 2017
Tracked Since
Feb 18, 2026