All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have an information disclosure vulnerability. Attackers could use this vulnerability to collect data information and damage the system.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:NZte Zxcloud Goldendata Vap
APPZte≤ zxivs-vap-portal-xzgav4.01.01.02
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Related vulnerabilities
CVE-2019-3431CRITICAL9.8PL ✓same product
ZTE ZXCLOUD GoldenData VAP — przechwycenie danych logowania przez brak szyfrowania
CVE-2019-3429MEDIUM5.3same product
All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have a file reading vulnerability. Attack...
CVE-2024-10119CRITICAL9.8PL ✓same vendor
Command injection w routerze SECOM WRTM326 — zdalne wykonanie poleceń
CVE-2022-39073CRITICAL9.8PL ✓same vendor
Command injection w ZTE MF286R — wykonanie dowolnych poleceń
CVE-2022-39070CRITICAL9.8PL ✓same vendor
Błąd kontroli dostępu w urządzeniach ZTE PON OLT umożliwia zdalne logowanie