PT-2019-16579 · Zte · Zxcdn Iamweb

Publicado 2019-11-22 · Atualizado 2020-08-24 · CVE-2019-3427

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ZTE ZXCDN IAMWEB version V6.01.03.01

Description The issue allows an attacker to inject malicious code into the management page, potentially leading to users' information leakage. This is achieved through a code injection vulnerability.

Recommendations For version V6.01.03.01, consider restricting access to the management page until a fix is available to prevent potential code injection attacks.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2019-3427

Produtos afetados

Zxcdn Iamweb

Referências · 3

• http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011863 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-3427 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-3427 · Nota de Segurança