CVSS: 6.8EPSS: 0%CPEs: 5EXPL: 0CVE-2024-22068 – Weak Password Vulnerability in ZTE ZSR V2 Intelligent Multi Service Router
https://notcve.org/view.php?id=CVE-2024-22068
10 Oct 2024 — Improper Privilege Management vulnerability in ZTE ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series on 64 bit allows Functionality Bypass.This issue affects ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series: V4.00.10 and earlier. La vulnerabilidad de administración de privilegios incorrecta en las series ZTE ZXR10 1800-2S, ZXR10 2800-4, ZXR10 3800-8, ZXR10 160 en 64 bits permite la omisión de funcionalidad. Este problema afecta a las series ZXR10 1800-2S, ZXR10 2800-4, ZXR10 3... • https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/5359853646778130472 • CWE-269: Improper Privilege Management •
CVSS: 5.3EPSS: 0%CPEs: 2EXPL: 0CVE-2020-6873
https://notcve.org/view.php?id=CVE-2020-6873
01 Sep 2020 — A ZTE product has a DoS vulnerability. Because the equipment couldn’t distinguish the attack packets and normal packets with valid http links, the remote attackers could use this vulnerability to cause the equipment WEB/TELNET module denial of service and make the equipment be out of management. This affects: ZXR10 2800-4_ALMPUFB(LOW), all versions up to V3.00.40. Un producto ZTE presenta una vulnerabilidad de DoS. Debido a que el equipo no pudo distinguir los paquetes de ataque y los paquetes normales... • http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013403 •