Vulnerabilities > ZTE > Low

DATE CVE VULNERABILITY TITLE RISK
2020-10-26 CVE-2020-6876 Cross-site Scripting vulnerability in ZTE Evdc Zxcloudirosv6.03.04
A ZTE product is impacted by an XSS vulnerability.
network
zte CWE-79
3.5
2020-06-01 CVE-2020-6868 Improper Input Validation vulnerability in ZTE F680 Firmware Zxhnf680V9.0.10P1N6
There is an input validation vulnerability in a PON terminal product of ZTE, which supports the creation of WAN connections through WEB management pages.
low complexity
zte CWE-20
3.3
2020-04-30 CVE-2020-6867 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in ZTE Zenic ONE R22B 16.19.10P02Sp002/6.19.10P02Sp005
ZTE's SDON controller is impacted by the resource management error vulnerability.
local
low complexity
zte CWE-119
2.1
2020-02-27 CVE-2020-6863 Incorrect Permission Assignment for Critical Resource vulnerability in ZTE E8820V3 Firmware 3.1.0.1000.4
ZTE E8820V3 router product is impacted by a permission and access control vulnerability.
low complexity
zte CWE-732
3.3
2020-02-27 CVE-2020-6864 Information Exposure vulnerability in ZTE E8820V3 Firmware 3.1.0.1000.4
ZTE E8820V3 router product is impacted by an information leak vulnerability.
low complexity
zte CWE-200
3.3
2019-11-13 CVE-2019-3420 Unspecified vulnerability in ZTE Zxhn H108N Firmware 2.5.0Eg1T5Ted
All versions up to V2.5.0_EG1T5_TED of ZTE ZXHN H108N product are impacted by an information leak vulnerability.
low complexity
zte
3.3
2019-11-07 CVE-2019-3422 Information Exposure vulnerability in ZTE Mf910S Firmware
The Sec Consult Security Lab reported an information disclosure vulnerability in MF910S product to ZTE PSIRT in October 2019.
local
zte CWE-200
1.9
2019-10-31 CVE-2019-3419 Improper Input Validation vulnerability in ZTE Zxmp M721 DX Firmware Zxmpm721V3.10P01B10M2Ncp
A security vulnerability exists in a management port in the version of ZTE's ZXMP M721V3.10P01B10_M2NCP.
low complexity
zte CWE-20
2.7
2019-07-22 CVE-2019-3414 Cross-site Scripting vulnerability in ZTE Otcp Firmware
All versions up to V1.19.20.02 of ZTE OTCP product are impacted by XSS vulnerability.
2.3
2019-07-11 CVE-2019-3415 Path Traversal vulnerability in ZTE Zxmw Nr8000 Firmware 2.4.4.03/2.4.4.04
ZTE MW NR8000V2.4.4.03 and NR8000V2.4.4.04 are impacted by path traversal vulnerability.
low complexity
zte CWE-22
2.7