Vulnerabilities > ZTE > Zxr10 1800 2S Firmware > High

DATE CVE VULNERABILITY TITLE RISK
2018-07-25 CVE-2017-10935 Unspecified vulnerability in ZTE Zxr10 1800-2S Firmware 3.00.40
All versions prior to ZSRV2 V3.00.40 of the ZTE ZXR10 1800-2S products allow remote authenticated users to bypass the original password authentication protection to change other user's password.
network
low complexity
zte
7.2
2017-09-19 CVE-2017-10931 Path Traversal vulnerability in ZTE Zxr10 1800-2S Firmware
The ZXR10 1800-2S before v3.00.40 incorrectly restricts the download of the file directory range for WEB users, resulting in the ability to download any files and cause information leaks such as system configuration.
network
low complexity
zte CWE-22
7.5