ZeroHour

CVE-2019-3412

CVSS 3.0
9.8 critical
EPSS
3%p86
Published
()
Modified
Description

All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by command execution vulnerability. Due to some interfaces do not adequately verify parameters, an attacker can execute arbitrary commands through specific interfaces.

Vendors
zte
Products
mf920 firmware
Weakness
CWE-78
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news