CVE-2019-3417

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by command injection vulnerability

High · published August 15, 2019

CVSS v3.0
8.1
EPSS
2%
Percentile
79.1
In the wild
Unconfirmed
What it is

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by command injection vulnerability. Due to insufficient parameter validation check, an authorized user can exploit this vulnerability to take control of user router system.

The record
Technical detail
CVSS v3.0
8.1 · HIGH
Vector
CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.01859 · 79.1th percentile
Published
2019-08-15T14:43Z
EPSS history
Timeline
  • 15 AUG 14:43Z
    All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by command injection vulnerability
    cvelistv5