PT-2019-16563 · Zte · Zte Mf920

Published 2019-06-11 · Updated 2022-04-18 · CVE-2019-3411

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ZTE MF920 versions up to BD R218V2.4

Description The issue allows an attacker to obtain sensitive information about the affected components due to certain interfaces being able to obtain the WebUI login password without requiring a login. This is an information leak issue.

Recommendations For versions up to BD R218V2.4, update to a version later than BD R218V2.4 to resolve the issue.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2019-3411

Affected Products

Zte Mf920

References · 3

• https://osv.dev/vulnerability/CVE-2019-3411 · Vendor Advisory
• http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010686 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-3411 · Security Note