Description
There is a permission and access control vulnerability of ZTE's ZXV10 XT802/ET301 product.Attackers with common permissions can log in the terminal web and change the password of the administrator illegally by intercepting requests to change the passwords.
References (1)
Core 1
Core References
Scores
CVSS v3
7.1
EPSS
0.0013
EPSS Percentile
32.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:L
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-269
Status
published
Products (2)
zte/zxv10_et301_firmware
< v3.22.11p3
zte/zxv10_xt802_firmware
< v2.24.10p1
Published
Aug 08, 2024
Tracked Since
Feb 18, 2026