CVE-2019-3417 - All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by command injection vulnerability

Back Back to CVE browser

HIGH

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by command injection vulnerability

Published Aug 15, 2019

8.8

HIGH

CVSS 3.1

EPSS 1.86%

Description

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by command injection vulnerability. Due to insufficient parameter validation check, an authorized user can exploit this vulnerability to take control of user router system.

Affected products

Vendor ZTE Product Zxhn F670 Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <=V1.1.10P3T18

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

ZTE

Zxhn F670

n/a

Version	Status	Constraints
unspecified	affected	<=V1.1.10P3T18

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (1)

http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010163
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010163		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner zte

Published Aug 15, 2019

Updated Aug 4, 2024

Reserved Dec 31, 2018

Link CVE-2019-3417

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-3417

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-3417