CVE-2018-7360 CRITICAL

CVE-2018-7360

Vendor Zte
Product ZXHN F670
Published November 16, 2018
Last update August 5, 2024

CVSS base score

9.6/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by information exposure vulnerability, which may allow an unauthenticated attacker to get the GPON SN information via appviahttp service.

Key dates

02Disclosure timeline

November 16, 2018 CVE published
August 5, 2024 Record updated