Vendor

ZTE

131 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

131 results · Feed

Medium 6.5

CVE-2023-25650

Arbitrary File Download Vulnerability in ZTE ZXCLOUD iRAI

There is an arbitrary file download vulnerability in ZXCLOUD iRAI. Since the backend does not escape special strings or restrict paths, an attacker with user permission could access the download interface by modifying the request parameter, causing arbitrary …

ZTE ZXCLOUD iRAI

Dec 14, 2023
Medium 6.5

CVE-2023-25648

Weak Folder Permission Vulnerability in ZTE ZXCLOUD iRAI

There is a weak folder permission vulnerability in ZTE's ZXCLOUD iRAI product. Due to weak folder permission, an attacker with ordinary user privileges could construct a fake DLL to execute command to escalate local privileges.

ZTE ZXCLOUD iRAI

Dec 14, 2023
Medium 6.8

CVE-2023-25649

OS Command Injection Vulnerability in a Mobile Internet Product of ZTE

There is a command injection vulnerability in a mobile internet product of ZTE. Due to insufficient validation of SET_DEVICE_LED interface parameter, an authenticated attacker could use the vulnerability to execute arbitrary commands.

ZTE MF286R

Aug 25, 2023
Medium 4.7

CVE-2023-25647

Permission and Access Control Vulnerability in Some ZTE Mobile Phones

There is a permission and access control vulnerability in some ZTE mobile phones. Due to improper access control, applications in mobile phone could monitor the touch event.

ZTE Some ZTE Mobile Phones

Aug 17, 2023
Unscored —

CVE-2020-6870

The version V12.17.20T115 of ZTE U31R20 product is impacted by a design error vulnerability. An attacker could exploit …

ZTE NetNumenU31R20

Jun 24, 2020
Unscored —

CVE-2020-6864 Public exploit

ZTE E8820V3 router product is impacted by an information leak vulnerability. Attackers could use this vulnerability to …

ZTE E8820V3

Feb 27, 2020
Unscored —

CVE-2020-6863

ZTE E8820V3 router product is impacted by a permission and access control vulnerability. Attackers could use this vulne…

ZTE E8820V3

Feb 27, 2020
Unscored —

CVE-2020-6862 Public exploit

V6.0.10P2T2 and V6.0.10P2T5 of F6x2W product are impacted by Information leak vulnerability. Unauthorized users could l…

ZTE F6x2W

Jan 17, 2020
Unscored —

CVE-2019-3431

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have encryption problems vulnerability. Attackers …

ZTE ZXCLOUD GoldenData VAP

Dec 23, 2019
Unscored —

CVE-2019-3430

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have an information disclosure vulnerability. Atta…

ZTE ZXCLOUD GoldenData VAP

Dec 23, 2019
Unscored —

CVE-2019-3429

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have a file reading vulnerability. Attackers could…

ZTE ZXCLOUD GoldenData VAP

Dec 23, 2019
Unscored —

CVE-2019-3428

The version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a configuration error vulnerability. An attacker cou…

ZTE ZXCDN IAMWEB

Nov 22, 2019
Unscored —

CVE-2019-3427

The version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a code injection vulnerability. An attacker could ex…

ZTE ZXCDN IAMWEB

Nov 22, 2019
Unscored —

CVE-2019-3424

authentication issues vulnerability, which exists in V2.1.14 and below versions of C520V21 smart camera devices. An att…

ZTE C520V21

Nov 18, 2019
Unscored —

CVE-2019-3423

permission and access control vulnerability, which exists in V2.1.14 and below versions of C520V21 smart camera devices…

ZTE C520V21

Nov 18, 2019
Unscored —

CVE-2019-3426

The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by the input validation vu…

ZTE ZXUPN-9000E

Nov 8, 2019
Unscored —

CVE-2019-3425

The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by vulnerability of permis…

ZTE ZXUPN-9000E

Nov 8, 2019
Unscored —

CVE-2019-3422

The Sec Consult Security Lab reported an information disclosure vulnerability in MF910S product to ZTE PSIRT in October…

ZTE MF910S

Nov 7, 2019
Unscored —

CVE-2019-3421

The 7520V3V1.0.0B09P27 version, and all earlier versions of ZTE product ZX297520V3 are impacted by a Command Injection …

ZTE ZX297520V3

Oct 31, 2019
Unscored —

CVE-2019-3419

A security vulnerability exists in a management port in the version of ZTE's ZXMP M721V3.10P01B10_M2NCP. An attacker co…

ZTE ZXMP M721 DX

Oct 31, 2019
High 8.1

CVE-2019-3416

All versions up to V81511329.1008 of ZTE ZXV10 B860A products are impacted by input validation vulnerability. Due to in…

ZTE ZXV10 B860A

Sep 23, 2019
Medium 5.7

CVE-2019-3418

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by cross-site scripting vulnerability (XSS). Due …

ZTE ZXHN F670

Aug 15, 2019
High 8.1

CVE-2019-3417

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by command injection vulnerability. Due to insuff…

ZTE ZXHN F670

Aug 15, 2019
Unscored —

CVE-2019-3414

All versions up to V1.19.20.02 of ZTE OTCP product are impacted by XSS vulnerability. Due to XSS, when an attacker invo…

ZTE OTCP

Jul 22, 2019
Unscored —

CVE-2019-3415

ZTE MW NR8000V2.4.4.03 and NR8000V2.4.4.04 are impacted by path traversal vulnerability. Due to path traversal,users ca…

ZTE MW

Jul 11, 2019
Medium 5.4

CVE-2019-3413

All versions up to V20.18.40.R7.B1of ZTE NetNumen DAP product have an XSS vulnerability. Due to the lack of correct val…

ZTE NetNumen DAP

Jun 11, 2019
Critical 9.8

CVE-2019-3412

All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by command execution vulnerability. Due to some interf…

ZTE ZTE MF920

Jun 11, 2019
High 8.1

CVE-2019-3411

All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by information leak vulnerability. Due to some interfa…

ZTE ZTE MF920

Jun 11, 2019
Medium 4.6

CVE-2019-3410

All versions up to UKBB_WF820+_1.0.0B06 of ZTE WF820+ LTE Outdoor CPE product are impacted by Cross-Site Request Forger…

ZTE ZTE WF820+ LTE Outdoor CPE

Jun 11, 2019
Critical 9.0

CVE-2019-3409

All versions up to UKBB_WF820+_1.0.0B06 of ZTE WF820+ LTE Outdoor CPE product are impacted by command injection vulnera…

ZTE ZTE WF820+ LTE Outdoor CPE

Jun 11, 2019
Medium 4.3

CVE-2018-7366

ZTE ZXV10 B860AV2.1 product ChinaMobile branch with the ICNT versions up to V1.3.3, the BESTV versions up to V1.2.2, th…

ZTE ZXV10 B860AV2.1_ChinaMobile

Dec 28, 2018
Medium 5.1

CVE-2018-7365

All versions up to ZXCLOUD iRAI V5.01.05 of the ZTE uSmartView product are impacted by untrusted search path vulnerabil…

ZTE uSmartView

Dec 20, 2018
High 8.3

CVE-2018-7364 EPSS 10%

All versions up to ZXINOS-RESV1.01.43 of the ZTE ZXIN10 product European region are impacted by improper access control…

ZTE ZXIN10-European region

Dec 7, 2018
High 7.5

CVE-2018-7362

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper access control vulnerability, which m…

ZTE ZXHN F670

Nov 16, 2018
Medium 4.3

CVE-2018-7363

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper authorization vulnerability. Since ap…

ZTE ZXHN F670

Nov 16, 2018
Critical 9.0

CVE-2018-7359

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by heap-based buffer overflow vulnerability, whic…

ZTE ZXHN F670

Nov 16, 2018
Critical 9.6

CVE-2018-7360

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by information exposure vulnerability, which may …

ZTE ZXHN F670

Nov 16, 2018
Medium 6.5

CVE-2018-7361

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by null pointer dereference vulnerability, which …

ZTE ZXHN F670

Nov 16, 2018
Medium 6.5

CVE-2018-7357 Public exploit EPSS 88%

ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper ac…

ZTE ZXHN H168N

Nov 14, 2018
Medium 6.5

CVE-2018-7358 Public exploit EPSS 90%

ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper ch…

ZTE ZXHN H168N

Nov 14, 2018