Vulnerabilities > ZTE > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-01-17 CVE-2020-6862 Incorrect Resource Transfer Between Spheres vulnerability in ZTE F6X2W Firmware 6.0.10P2T2/6.0.10P2T5
V6.0.10P2T2 and V6.0.10P2T5 of F6x2W product are impacted by Information leak vulnerability.
network
low complexity
zte CWE-669
5.3
2019-12-23 CVE-2019-3430 Unspecified vulnerability in ZTE Zxcloud Goldendata VAP Zxivsvapportalxzgav4.01.01.02
All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have an information disclosure vulnerability.
network
low complexity
zte
4.9
2019-12-23 CVE-2019-3429 Information Exposure Through Log Files vulnerability in ZTE Zxcloud Goldendata VAP Zxivsvapportalxzgav4.01.01.02
All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have a file reading vulnerability.
network
low complexity
zte CWE-532
5.3
2019-11-22 CVE-2019-3428 Unspecified vulnerability in ZTE Zxcdn Iamweb Firmware 6.01.03.01
The version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a configuration error vulnerability.
network
low complexity
zte
6.5
2019-11-13 CVE-2019-3420 Unspecified vulnerability in ZTE Zxhn H108N Firmware 2.5.0Eg1T5Ted
All versions up to V2.5.0_EG1T5_TED of ZTE ZXHN H108N product are impacted by an information leak vulnerability.
low complexity
zte
6.5
2019-11-07 CVE-2019-3422 Information Exposure vulnerability in ZTE Mf910S Firmware
The Sec Consult Security Lab reported an information disclosure vulnerability in MF910S product to ZTE PSIRT in October 2019.
local
low complexity
zte CWE-200
6.2
2019-10-31 CVE-2019-3419 Unspecified vulnerability in ZTE Zxmp M721 DX Firmware Zxmpm721V3.10P01B10M2Ncp
A security vulnerability exists in a management port in the version of ZTE's ZXMP M721V3.10P01B10_M2NCP.
low complexity
zte
5.7
2019-08-15 CVE-2019-3418 Cross-site Scripting vulnerability in ZTE Zxhn F670 Firmware
All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by cross-site scripting vulnerability (XSS).
network
low complexity
zte CWE-79
5.4
2019-07-22 CVE-2019-3414 Cross-site Scripting vulnerability in ZTE Otcp Firmware 1.19.20.02
All versions up to V1.19.20.02 of ZTE OTCP product are impacted by XSS vulnerability.
low complexity
zte CWE-79
4.8
2019-07-11 CVE-2019-3415 Path Traversal vulnerability in ZTE Zxmw Nr8000 Firmware 2.4.4.03/2.4.4.04
ZTE MW NR8000V2.4.4.03 and NR8000V2.4.4.04 are impacted by path traversal vulnerability.
low complexity
zte CWE-22
5.7