CVE-2018-7365 MEDIUM

CVE-2018-7365

Vendor Zte
Product uSmartView
Weakness CWE-426
Published December 20, 2018
Last update August 5, 2024
View on NVD All CVEs

CVSS base score

5.1/10
Attack vector Network
Attack complexity High
Privileges required High
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L

What the vulnerability does

01Description

All versions up to ZXCLOUD iRAI V5.01.05 of the ZTE uSmartView product are impacted by untrusted search path vulnerability, which may allow an unauthorized user to perform unauthorized operations.

Key dates

02Disclosure timeline

December 20, 2018 CVE published
August 5, 2024 Record updated