PT-2018-18049 · Zte · Zte Zxhn F670

Alexander Shvetsov + 2 · Publicado 2018-11-16 · Atualizado 2019-10-09 · CVE-2018-7362

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ZTE ZXHN F670 versions prior to V1.1.10P3T18

Description The issue is related to improper access control, which may allow an unauthorized user to perform unauthorized operations on the router.

Recommendations For versions prior to V1.1.10P3T18, update to a version that addresses the improper access control issue to prevent unauthorized operations on the router.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2018-7362

Produtos afetados

Zte Zxhn F670

Referências · 3

• http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1009383 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-7362 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-7362 · Aviso do Fabricante