CVE-2018-7360

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by information exposure vulnerability, which may allow an unauthenticated attacker to get…

Critical · published November 16, 2018

CVSS v3.0
9.6
EPSS
1%
Percentile
62.1
In the wild
Unconfirmed
What it is

🚨 The ZTE ZXHN F670 has a gaping hole! Unauthenticated attackers can snatch sensitive GPON SN information like a thief in the night! 🔥 Think of this like a restaurant that accidentally leaves its back door wide open; any passerby can waltz in and grab the chef's secret recipes without any effort. This vulnerability exposes crucial information that should be kept behind closed doors. An attacker exploiting this flaw could collect sensitive GPON SN information without needing any special access — a recipe for disaster if they use it to target your network. With a CVSS score of 9.6, this isn't something to shrug off; it could lead to further attacks and unauthorized access to your system.

Put simply

Think of this like a restaurant that accidentally leaves its back door wide open; any passerby can waltz in and grab the chef's secret recipes without any effort. This vulnerability exposes crucial information that should be kept behind closed doors. This information exposure vulnerability allows unauthenticated users to access GPON SN information via the appviahttp service in all versions of the ZTE ZXHN F670 up to V1.1.10P3T18, putting sensitive data at risk.

What to do

An attacker exploiting this flaw could collect sensitive GPON SN information without needing any special access — a recipe for disaster if they use it to target your network. With a CVSS score of 9.6, this isn't something to shrug off; it could lead to further attacks and unauthorized access to your system. Update your device to the latest firmware version to close this vulnerability immediately. If you're running older versions, make it a priority to implement this patch and review your network security measures. Don't let your data be the easy target! You can tackle this! Follow these steps to bolster your security and keep your network safe! 🛡️

The record
Technical detail
CVSS v3.0
9.6 · CRITICAL
Vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00996 · 62.1th percentile
Published
2018-11-16T15:00Z
EPSS history
Timeline
  • 16 NOV 15:00Z
    All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by information exposure vulnerability, which may allow an unauthenticated attacker to get…
    cvelistv5