CVE-2019-3418 MEDIUM

CVE-2019-3418

Vendor Zte
Product ZXHN F670
Published August 15, 2019
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

5.7/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity None

CVSS vector

CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by cross-site scripting vulnerability (XSS). Due to incomplete input validation, an authorized user can exploit this vulnerability to execute malicious scripts.

Key dates

02Disclosure timeline

August 15, 2019 CVE published
August 4, 2024 Record updated