Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-3425

Опубликовано: 08 нояб. 2019
Источник: nvd
CVSS3: 8.8
CVSS2: 7.5
EPSS Низкий

Описание

The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by vulnerability of permission and access control. An attacker could exploit this vulnerability to directly reset or change passwords of other accounts.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:zte:zxupn-9000e_firmware:*:*:*:*:*:*:*:*
Версия до 9000ev5.0r1b12 (исключая)
cpe:2.3:h:zte:zxupn-9000e:-:*:*:*:*:*:*:*

EPSS

Процентиль: 57%
0.00357
Низкий

8.8 High

CVSS3

7.5 High

CVSS2

Дефекты

CWE-732

Связанные уязвимости

CVSS3: 8.8
github
больше 3 лет назад

The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by vulnerability of permission and access control. An attacker could exploit this vulnerability to directly reset or change passwords of other accounts.

EPSS

Процентиль: 57%
0.00357
Низкий

8.8 High

CVSS3

7.5 High

CVSS2

Дефекты

CWE-732