CVE-2019-3412

All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by command execution vulnerability. Due to some interfaces do not adequately verify parameters, an attacker can execute arbitrary commands through specific interfaces.

Score

CVSS 3.0 9.8 Critical

Status

Modified - psirt@zte.com.cn

Published

2019-06-11

Last modified

2024-08-04

Weaknesses

CWE-78

Affected products

• Mf920 Firmware (Zte)
• Zte Mf920 (Zte)

References

• http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010686