CVE-2019-3425 - The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by vulnerability of permission and access control

Back Back to CVE browser

HIGH

The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by vulnerability of permission and access control

Published Nov 8, 2019

8.8

HIGH

CVSS 3.1

EPSS 0.97%

Description

The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by vulnerability of permission and access control. An attacker could exploit this vulnerability to directly reset or change passwords of other accounts.

Affected products

Vendor ZTE Corporation Product Zxupn-9000e Default
n/a
- Version
  All versions up to 9000EV5.0R1B12
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

ZTE Corporation

Zxupn-9000e

n/a

Version	Status	Constraints
All versions up to 9000EV5.0R1B12	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-732

Incorrect Permission Assignment

References (1)

http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011683
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011683		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner zte

Published Nov 8, 2019

Updated Aug 4, 2024

Reserved Dec 31, 2018

Link CVE-2019-3425

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-3425

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-3425