CVE-2018-7358

ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper change control vulnerability, which may…

Medium · published November 14, 2018

Patch now

High probability of exploitation

CVSS calls it medium at 6.5. It sits in the 99.8th percentile for exploit probability.

CVSS v3.0

6.5

EPSS

90%

Percentile

99.8

In the wild

Unconfirmed

What it is

ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper change control vulnerability, which may allow an unauthorized user to perform unauthorized operations.

The record

Technical detail

CVSS v3.0: 6.5 · MEDIUM
Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0: Not supplied
EPSS: 0.89645 · 99.8th percentile
Published: 2018-11-14T15:00Z

EPSS history

Timeline

14 NOV 15:00Z
ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper change control vulnerability, which may…
cvelistv5