PT-2018-18051 · Zte · Zxin10

Guillaume Tessier · Publicado 2018-12-07 · Atualizado 2023-03-01 · CVE-2018-7364

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ZTE ZXIN10 versions prior to ZXINOS-RESV1.01.43

Description The issue is related to improper access control, specifically to the devcomm process, allowing an unauthorized remote attacker to execute arbitrary code with root privileges.

Recommendations For versions prior to ZXINOS-RESV1.01.43, update to a version newer than ZXINOS-RESV1.01.43 to resolve the issue.

Exploit

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2018-7364

GHSA-34F2-7H57-RG7P

Produtos afetados

Zxin10

Referências · 5

• 🔥 https://github.com/orangecertcc/security-research/security/advisories/GHSA-34f2-7h57-rg7p · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-7364 · Nota de Segurança
• http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1009943 · Aviso do Fabricante
• https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1009943 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-7364 · Aviso do Fabricante