CVE-2017-10933

CVE-2017-10933: vulnerability in ZTE ZXDT22 SF01

Published · Updated

Follow this CVE+ Monitor ZXDT22 SF01

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.1%
In short

The ZTE ZXDT22 SF01 monitoring system has a flaw that lets attackers read any file on the server by manipulating the file path in a web request. This is dangerous because sensitive information like passwords or configuration files can be exposed.

Technical detail

A directory traversal vulnerability in ZTE ZXDT22 SF01 versions before V2.06.00.00 permits unauthenticated remote attackers to access arbitrary files by supplying full path names in requests. The vulnerability stems from insufficient input validation on file path parameters, enabling attackers to bypass directory restrictions and read sensitive system files.

Summary generated and translated by AI from the official description.
All versions prior to V2.06.00.00 of ZTE ZXDT22 SF01, an monitoring system of ZTE energy product, are impacted by directory traversal vulnerability that allows remote attackers to read arbitrary files on the system via a full path name after host address.
Affected products
ZTE · ZXDT22 SF01