CVE-2019-3411

All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by information leak vulnerability

High · published June 11, 2019

CVSS v3.0
8.1
EPSS
1%
Percentile
69.6
In the wild
Unconfirmed
What it is

All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by information leak vulnerability. Due to some interfaces can obtain the WebUI login password without login, an attacker can exploit the vulnerability to obtain sensitive information about the affected components.

The record
Technical detail
CVSS v3.0
8.1 · HIGH
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01271 · 69.6th percentile
Published
2019-06-11T19:19Z
EPSS history
Timeline
  • 11 JUN 19:19Z
    All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by information leak vulnerability
    cvelistv5