Vulnerabilities > ZTE > Zxr10 2800 4 Firmware > 3.00.40

DATE CVE VULNERABILITY TITLE RISK
2024-10-10 CVE-2024-22068 Weak Password Requirements vulnerability in ZTE products
Improper Privilege Management vulnerability in ZTE ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series on 64 bit allows Functionality Bypass.This issue affects ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series: V4.00.10 and earlier.
network
low complexity
zte CWE-521
6.5
6.5
2017-09-19 CVE-2017-10931 Path Traversal vulnerability in ZTE products
The ZXR10 1800-2S before v3.00.40 incorrectly restricts the download of the file directory range for WEB users, resulting in the ability to download any files and cause information leaks such as system configuration.
network
low complexity
zte CWE-22
7.5
7.5
2017-09-19 CVE-2017-10930 Files or Directories Accessible to External Parties vulnerability in ZTE products
The ZXR10 1800-2S before v3.00.40 incorrectly restricts access to a resource from an unauthorized actor, resulting in ordinary users being able to download configuration files to steal information like administrator accounts and passwords.
network
low complexity
zte CWE-552
critical
 9.8
9.8