CVE-2019-3417 HIGH

CVE-2019-3417

Vendor Zte
Product ZXHN F670
Published August 15, 2019
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

8.1/10
Attack vector Adjacent
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

What the vulnerability does

01Description

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by command injection vulnerability. Due to insufficient parameter validation check, an authorized user can exploit this vulnerability to take control of user router system.

Key dates

02Disclosure timeline

August 15, 2019 CVE published
August 4, 2024 Record updated