CVE-2019-3425

The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by vulnerability of permission and access control. An attacker could exploit this vulnerability to directly reset or change passwords of other accounts.

Score

CVSS 3.1 8.8 High

Status

Modified - psirt@zte.com.cn

Published

2019-11-08

Last modified

2024-08-04

Weaknesses

CWE-732

Affected products

• Zxupn-9000e Firmware (Zte)
• Zxupn-9000e (Zte Corporation)

References

• http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011683