HIGH · 7.5

CVE-2018-7362

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper access control vulnerability, which may allows an unauthorized user to perform unauthorized operations on the router.

Vulnerability Description

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper access control vulnerability, which may allows an unauthorized user to perform unauthorized operations on the router.

CVSS Score

7.5

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
ZteZxhn F670 Firmware< 1.1.10p3t18
ZteZxhn F670-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2018-7362?

CVE-2018-7362 is a vulnerability with a CVSS score of 7.5 (HIGH). All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper access control vulnerability, which may allows an unauthorized user to perform unauthorized operations on the router.

How severe is CVE-2018-7362?

CVE-2018-7362 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-7362?

Check the references section above for vendor advisories and patch information. Affected products include: Zte Zxhn F670 Firmware, Zte Zxhn F670.