Original release date: 12 November 2019 CVE ID CVE-2019-3420 CVSS 3.0 Base Score 6.5 Medium (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Description All versions up to V2.5.0_EG1T5_TED of ZTE ZXHN H108N product are impacted by an information leak vulnerability. An attacker could exploit the vulnerability to obtain sensitive information and perform unauthorized operations. Product Name | Affected Version | Resolved Version | ZXHN H108N | all versions up to V2.5.0_EG1T5_TED | V2.5.0_EG1T7_TED or later |
Credit Security researcher Morad Abdelrasheed Mokhtar Ali submitted a vulnerability of the ZXHN H108N product to ZTE PSIRT. Update Records 12 November 2019, initial. 4 February 2020, Update affected version. Supporting team contacts 1. ZTE GCSC hotline: 0755-26770800 800-830-1118 400-830-1118 2. Product forum at ZTE Support website. ZTE PSIRT If you need to report security vulnerabilities related to ZTE products, or get ZTE product security incident response service and vulnerability information, please contact ZTE PSIRT: psirt@zte.com.cn, PGP key ID: FF095577.
|