Information Leak Vulnerability in ZTE ZXHN H108N Product

Original release date: 12 November 2019

 

CVE ID

CVE-2019-3420

 

CVSS 3.0 Base Score

6.5 Medium (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)

 

Description

All versions up to V2.5.0_EG1T5_TED of ZTE ZXHN H108N product are impacted by an information leak vulnerability. An attacker could exploit the vulnerability to obtain sensitive information and perform unauthorized operations.

Product Name

Affected Version

Resolved Version

ZXHN H108N

all versions up to V2.5.0_EG1T5_TED

V2.5.0_EG1T7_TED or later

 
Credit

Security researcher Morad Abdelrasheed Mokhtar Ali submitted a vulnerability of the ZXHN H108N product to ZTE PSIRT.

 

Update Records

12 November 2019, initial.

February 2020, Update affected version. 
 

 

Supporting team contacts

1. ZTE GCSC hotline:

0755-26770800

800-830-1118

400-830-1118

2. Product forum at ZTE Support website.

 

ZTE PSIRT

If you need to report security vulnerabilities related to ZTE products, or get ZTE product security incident response service and vulnerability information, please contact ZTE PSIRT: psirt@zte.com.cn, PGP key ID: FF095577.

[Close]