CVE-2019-3418

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by cross-site scripting vulnerability (XSS). Due to incomplete input validation, an authorized user can exploit this vulnerability to execute malicious scripts.

Score

CVSS 3.0 5.7 Medium

Status

Modified - psirt@zte.com.cn

Published

2019-08-15

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Zxhn F670 (Zte)
• Zxhn F670 Firmware (Zte)

References

• http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010163