MEDIUM🇵🇱 Wersja polska

CVE-2019-3430

CVSS 4.9v3.1pub. 2019-12-23upd. 2024-11-21

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have an information disclosure vulnerability. Attackers could use this vulnerability to collect data information and damage the system.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
  • Zte Zxcloud Goldendata Vap

    APP
    Zte
    ≤ zxivs-vap-portal-xzgav4.01.01.02
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2019-3431CRITICAL9.8PL ✓same product

ZTE ZXCLOUD GoldenData VAP — przechwycenie danych logowania przez brak szyfrowania

CVE-2019-3429MEDIUM5.3same product

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have a file reading vulnerability. Attack...

CVE-2024-10119CRITICAL9.8PL ✓same vendor

Command injection w routerze SECOM WRTM326 — zdalne wykonanie poleceń

CVE-2022-39073CRITICAL9.8PL ✓same vendor

Command injection w ZTE MF286R — wykonanie dowolnych poleceń

CVE-2022-39070CRITICAL9.8PL ✓same vendor

Błąd kontroli dostępu w urządzeniach ZTE PON OLT umożliwia zdalne logowanie