PT-2019-16563 · Zte · Zte Mf920

Publicado 2019-06-11 · Atualizado 2022-04-18 · CVE-2019-3411

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ZTE MF920 versions up to BD R218V2.4

Description The issue allows an attacker to obtain sensitive information about the affected components due to certain interfaces being able to obtain the WebUI login password without requiring a login. This is an information leak issue.

Recommendations For versions up to BD R218V2.4, update to a version later than BD R218V2.4 to resolve the issue.

Correção

Missing Authentication

Enumeração de Fraquezas

CWE-306

Identificadores relacionados

CVE-2019-3411

Produtos afetados

Zte Mf920

Referências · 3

• https://osv.dev/vulnerability/CVE-2019-3411 · Aviso do Fabricante
• http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010686 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-3411 · Nota de Segurança