PT-2018-18049 · Zte · Zte Zxhn F670

Alexander Shvetsov + 2 · Published 2018-11-16 · Updated 2019-10-09 · CVE-2018-7362

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ZTE ZXHN F670 versions prior to V1.1.10P3T18

Description The issue is related to improper access control, which may allow an unauthorized user to perform unauthorized operations on the router.

Recommendations For versions prior to V1.1.10P3T18, update to a version that addresses the improper access control issue to prevent unauthorized operations on the router.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2018-7362

Affected Products

Zte Zxhn F670

References · 3

• http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1009383 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-7362 · Security Note
• https://osv.dev/vulnerability/CVE-2018-7362 · Vendor Advisory