← Back

CVE-2018-7366

nvd nist
Published: Dec 28, 2018Modified: Nov 21, 2024

JSON object

Loading...
6.8
Vector
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.9 / Impact: 5.9
Source: NVD

Description

ZTE ZXV10 B860AV2.1 product ChinaMobile branch with the ICNT versions up to V1.3.3, the BESTV versions up to V1.2.2, the WASU versions up to V1.1.7 and the MGTV versions up to V1.4.6 have an authentication bypass vulnerability, which may allows an unauthorized user to perform unauthorized operations.

Affected (4)

Zte
1 product
Zxv10 B860av2.1 Chinamobile Firmware
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Zxv10 B860av2.1 Chinamobile Firmware
Before icnt_v1.3.3
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Zxv10 B860av2.1 Chinamobile Firmware
Before bestv_v1.2.2
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Zxv10 B860av2.1 Chinamobile Firmware
Before wasu_v1.1.7
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Zxv10 B860av2.1 Chinamobile Firmware
Before mgtv_v1.4.6
Running on/withPlatform Versions
Zte
Zxv10 B860av2.1 Chinamobile
All versions

Related CWEs

CWE-863
Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References (2)

Source: psirt@zte.com.cn
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.