ZTE ZXUN-ePDG product, which serves as the network node of the VoWifi system, under by default configuration, uses a set of non-unique cryptographic keys during establishing a secure connection(IKE) with the mobile devices connecting over the internet . If the set of keys are leaked or cracked, the user session informations using the keys may be leaked.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:LZte Zxun Epdg
APPZte< 5.20.20
Related vulnerabilities
Command injection w routerze SECOM WRTM326 — zdalne wykonanie poleceń
There is a command injection vulnerability in ZTE MF286R, Due to insufficient validation of the input paramete...
There is an access control vulnerability in some ZTE PON OLT products. Due to improper access control settings...
There is a broken access control vulnerability in ZTE ZXvSTB product. Due to improper permission control, atta...
ZTE MF971R product has two stack-based buffer overflow vulnerabilities. An attacker could exploit the vulnerab...