← Back

CVE-2018-7365

nvd nist
Published: Dec 20, 2018Modified: Jun 17, 2026

JSON object

Loading...
7.2
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.2 / Impact: 5.9
Source: NVD

Description

All versions up to ZXCLOUD iRAI V5.01.05 of the ZTE uSmartView product are impacted by untrusted search path vulnerability, which may allow an unauthorized user to perform unauthorized operations.

Affected (2)

Zte
2 products
Zxcloud Irai
Usmartview
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Zxcloud Irai
Up to 5.01.05
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Usmartview
All versions

Related CWEs

CWE-426
Untrusted Search Path
The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

References (2)

Source: psirt@zte.com.cn
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.