CVE-2019-3431 - All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have encryption problems vulnerability

Back Back to CVE browser

CRITICAL

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have encryption problems vulnerability

Published Dec 23, 2019

9.8

CRITICAL

CVSS 3.1

EPSS 0.40%

Description

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have encryption problems vulnerability. Attackers could sniff unencrypted account and password through the network for front-end system access.

Affected products

Vendor ZTE Product ZXCLOUD GoldenData VAP Default
n/a
- Version
  All versions up to V4.01.01.02
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

ZTE

ZXCLOUD GoldenData VAP

n/a

Version	Status	Constraints
All versions up to V4.01.01.02	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-311

Missing Encryption of Sensitive Data

CWE-522

Insufficiently Protected Credentials

References (2)

http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1012023
x_refsource_CONFIRMVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-13070
Advisory

Link	Providers	Tags
http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1012023		x_refsource_CONFIRMVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-13070		Advisory