CVE-2018-7355

All versions up to V1.0.0B05 of ZTE MF65 and all versions up to V1.0.0B02 of ZTE MF65M1 are impacted by cross-site scripting vulnerability

published September 26, 2018

CVSS
—
EPSS
2%
Percentile
79.5
In the wild
Unconfirmed
What it is

All versions up to V1.0.0B05 of ZTE MF65 and all versions up to V1.0.0B02 of ZTE MF65M1 are impacted by cross-site scripting vulnerability. Due to improper neutralization of input during web page generation, an attacker could exploit this vulnerability to conduct reflected XSS or HTML injection attacks on the devices.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01897 · 79.5th percentile
Published
2018-09-26T16:00Z
EPSS history
Timeline
  • 26 SEP 16:00Z
    All versions up to V1.0.0B05 of ZTE MF65 and all versions up to V1.0.0B02 of ZTE MF65M1 are impacted by cross-site scripting vulnerability
    cvelistv5