PT-2019-16562 · Zte · Zte Wf820+

Publicado 2019-06-11 · Atualizado 2019-10-09 · CVE-2019-3410

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ZTE WF820+ LTE Outdoor CPE product versions prior to UKBB WF820+ 1.0.0B06

Description The issue stems from the fact that web applications do not adequately verify whether requests come from trusted users, allowing an attacker to exploit this and send unexpected requests to the server through the affected client.

Recommendations For versions prior to UKBB WF820+ 1.0.0B06, update to UKBB WF820+ 1.0.0B06 or later to resolve the issue. As a temporary workaround, consider restricting access to the web application to minimize the risk of exploitation.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2019-3410

Produtos afetados

Zte Wf820+

Referências · 3

• http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010662 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-3410 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-3410 · Nota de Segurança