İçeriğe atla
Noroxi

ZTE kayıtları

zte üreticisine ait 187 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
16
Düzeltme kaydı olan
%0,5
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

187 kayıt
  • CVE-2018-7358
    62Bu hafta

    ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper change control vulnerab

    YüksekCVSS 8,8Kavram kanıtıEPSS %90

    zte · zxhn h168n firmware14 Kas 2018

  • CVE-2018-7357
    61Bu hafta

    ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper access control vulnerab

    YüksekCVSS 8,8Kavram kanıtıEPSS %88

    zte · zxhn h168n firmware14 Kas 2018

  • CVE-2014-2321
    58Planlayın

    web_shell_cmd.gch on ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests, as demonst

    KritikCVSS 10,0Kavram kanıtıEPSS %59

    zte · f46011 Mar 2014

  • CVE-2022-39066
    43Planlayın

    There is a SQL injection vulnerability in ZTE MF286R.

    YüksekCVSS 8,8Kavram kanıtıEPSS %27

    zte · mf286r firmware22 Kas 2022

  • CVE-2015-7251
    42Planlayın

    ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE have a hardcoded password of root for the root account, which allows remote atta

    KritikCVSS 9,8Kavram kanıtıEPSS %11

    zte · zxhn h108n r1a firmware30 Ara 2015

  • CVE-2018-7364
    42Planlayın

    All versions up to ZXINOS-RESV1.01.43 of the ZTE ZXIN10 product European region are impacted by improper access control vulnerability.

    KritikCVSS 9,8İstismar yokEPSS %10

    zte · zxin107 Ara 2018

  • CVE-2017-3216
    41Planlayın

    WiMAX routers based on the MediaTek SDK (libmtk) that use a custom httpd plugin are vulnerable to an authentication bypass allowing a remote

    KritikCVSS 9,8İstismar yokEPSS %5

    greenpacket · ox350 firmware19 Haz 2017

  • CVE-2014-9183
    41Planlayın

    ZTE ZXDSL 831CII has a default password of admin for the admin account, which allows remote attackers to gain administrator privileges.

    KritikCVSS 10,0İstismar yokEPSS %4

    zte · zxdsl2 Ara 2014

  • CVE-2012-2949
    41Planlayın

    The ZTE sync_agent program for Android 2.3.4 on the Score M device uses a hardcoded ztex1609523 password to control access to commands, whic

    KritikCVSS 10,0İstismar yokEPSS %4

    zte · score m29 May 2012

  • CVE-2014-0329
    40Planlayın

    The TELNET service on the ZTE ZXV10 W300 router 2.1.0 has a hardcoded password ending with airocon for the admin account, which allows remot

    KritikCVSS 9,3Kavram kanıtıEPSS %9

    zte · zxv10 w3004 Şub 2014

  • CVE-2017-10932
    40Planlayın

    All versions prior to V12.17.20 of the ZTE Microwave NR8000 series products - NR8120, NR8120A, NR8120, NR8150, NR8250, NR8000 TR and NR8950

    KritikCVSS 9,8İstismar yokEPSS %4

    zte · nr8120 firmware27 Eyl 2017

  • CVE-2022-39073
    40Planlayın

    There is a command injection vulnerability in ZTE MF286R, Due to insufficient validation of the input parameters, an attacker could use the

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    zte · mf286r firmware6 Oca 2023

  • CVE-2017-10934
    40Planlayın

    All versions prior to V5.09.02.02T4 of the ZTE ZXIPTV-EPG product use the Java RMI service in which the servers use the Apache Commons Colle

    KritikCVSS 9,8İstismar yokEPSS %3

    zte · zxiptv-epg firmware25 Tem 2018

  • CVE-2019-3412
    40Planlayın

    All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by command execution vulnerability.

    KritikCVSS 9,8İstismar yokEPSS %3

    zte · mf920 firmware11 Haz 2019

  • CVE-2021-21741
    40Planlayın

    There is a command execution vulnerability in a ZTE conference management system.

    KritikCVSS 9,8İstismar yokEPSS %2

    zte · zxv10 m910 firmware30 Ağu 2021

  • CVE-2020-6871
    40Planlayın

    The server management software module of ZTE has an authentication issue vulnerability, which allows users to skip the authentication of the

    KritikCVSS 9,8İstismar yokEPSS %2

    zte · r8500g4 firmware20 Tem 2020

  • CVE-2018-7359
    40Planlayın

    All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by heap-based buffer overflow vulnerability, which may allow an attack

    KritikCVSS 9,8İstismar yokEPSS %2

    zte · zxhn f670 firmware16 Kas 2018

  • CVE-2021-21748
    40Planlayın

    ZTE MF971R product has two stack-based buffer overflow vulnerabilities.

    KritikCVSS 9,8İstismar yokEPSS %2

    zte · mf971r firmware20 Eki 2021

  • CVE-2015-7258
    39İzleyin

    ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated users to obtain user passwords by di

    YüksekCVSS 8,8Kavram kanıtıEPSS %13

    zte · zxv10 w300 firmware24 Ağu 2017

  • CVE-2021-21749
    39İzleyin

    ZTE MF971R product has two stack-based buffer overflow vulnerabilities.

    KritikCVSS 9,8İstismar yokEPSS %2

    zte · mf971r firmware20 Eki 2021

  • CVE-2020-6880
    39İzleyin

    A ZXELINK wireless controller has a SQL injection vulnerability.

    KritikCVSS 9,8İstismar yokEPSS %1

    zte · zxv10 w908 firmware1 Ara 2020

  • CVE-2020-6875
    39İzleyin

    A ZTE product is impacted by the improper access control vulnerability.

    KritikCVSS 9,8İstismar yokEPSS %1

    zte · zxone 19700 snpe firmware5 Eki 2020

  • CVE-2017-10930
    39İzleyin

    The ZXR10 1800-2S before v3.00.40 incorrectly restricts access to a resource from an unauthorized actor, resulting in ordinary users being a

    KritikCVSS 9,8İstismar yokEPSS %1

    zte · zxr10 1800-2s firmware19 Eyl 2017

  • CVE-2019-3416
    39İzleyin

    All versions up to V81511329.1008 of ZTE ZXV10 B860A products are impacted by input validation vulnerability.

    KritikCVSS 9,8İstismar yokEPSS %1

    zte · zxv10 b860a firmware23 Eyl 2019

  • CVE-2021-21730
    39İzleyin

    A ZTE product is impacted by improper access control vulnerability.

    KritikCVSS 9,8İstismar yokEPSS %1

    zte · zxhn h168n firmware13 Nis 2021