CVE-2018-7363 MEDIUM

CVE-2018-7363

Vendor Zte
Product ZXHN F670
Published November 16, 2018
Last update August 5, 2024
View on NVD All CVEs

CVSS base score

4.3/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper authorization vulnerability. Since appviahttp service has no authorization delay, an attacker can be allowed to brute force account credentials.

Key dates

02Disclosure timeline

November 16, 2018 CVE published
August 5, 2024 Record updated