Vulnerabilities > ZTE > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-11-22 CVE-2022-39067 Classic Buffer Overflow vulnerability in ZTE Mf286R Firmware Crlvwrgbmf286Rv1.0.0B04
There is a buffer overflow vulnerability in ZTE MF286R.
network
low complexity
zte CWE-120
6.5
2022-11-08 CVE-2022-39069 SQL Injection vulnerability in ZTE Zaip-Aie
There is a SQL injection vulnerability in ZTE ZAIP-AIE.
network
low complexity
zte CWE-89
5.3
2022-07-18 CVE-2022-23142 Unspecified vulnerability in ZTE Zxen Cg200 Firmware 1.0.0P1N5M
ZXEN CG200 has a DoS vulnerability.
network
low complexity
zte
5.3
2022-05-11 CVE-2022-23137 Cross-site Scripting vulnerability in ZTE Zxcdn Firmware
ZTE's ZXCDN product has a reflective XSS vulnerability.
network
low complexity
zte CWE-79
6.1
2022-03-30 CVE-2022-23136 Cross-site Scripting vulnerability in ZTE Zxhn F680 Firmware 6.0.10P3N20
There is a stored XSS vulnerability in ZTE home gateway product.
network
low complexity
zte CWE-79
5.4
2022-02-24 CVE-2022-23135 Path Traversal vulnerability in ZTE Zxhn F477 Firmware and Zxhn F677 Firmware
There is a directory traversal vulnerability in some home gateway products of ZTE.
network
low complexity
zte CWE-22
6.5
2021-10-20 CVE-2021-21743 Injection vulnerability in ZTE Mf971R Firmware
ZTE MF971R product has a CRLF injection vulnerability.
network
low complexity
zte CWE-74
4.3
2021-10-20 CVE-2021-21745 Cross-Site Request Forgery (CSRF) vulnerability in ZTE Mf971R Firmware
ZTE MF971R product has a Referer authentication bypass vulnerability.
network
low complexity
zte CWE-352
4.3
2021-10-20 CVE-2021-21746 Cross-site Scripting vulnerability in ZTE Mf971R Firmware
ZTE MF971R product has reflective XSS vulnerability.
network
low complexity
zte CWE-79
6.1
2021-10-20 CVE-2021-21747 Cross-site Scripting vulnerability in ZTE Mf971R Firmware
ZTE MF971R product has reflective XSS vulnerability.
network
low complexity
zte CWE-79
6.1