Vulnerabilidades en ZTE
122 resultadosCVE-2024-22067MEDIUMZTE NH8091 product has an improper permission control vulnerabilityEPSS 0.7%CVE-2018-7356MEDIUMAll versions up to V3.03.10.B23P2 of ZTE ZXR10 8905E product are impacted by TCP Initial Sequence Number (ISN) reuse vulnerability, which caEPSS 0.7%CVE-2019-3413MEDIUMAll versions up to V20.18.40.R7.B1of ZTE NetNumen DAP product have an XSS vulnerability. Due to the lack of correct validation of client datEPSS 0.6%CVE-2020-6870—The version V12.17.20T115 of ZTE U31R20 product is impacted by a design error vulnerability. An attacker could exploit the vulnerability to EPSS 0.6%CVE-2023-41783MEDIUMCommand Injection Vulnerability of ZTE's ZXCLOUD iRAIEPSS 0.6%CVE-2023-25650MEDIUMArbitrary File Download Vulnerability in ZTE ZXCLOUD iRAIEPSS 0.6%CVE-2018-7366MEDIUMZTE ZXV10 B860AV2.1 product ChinaMobile branch with the ICNT versions up to V1.3.3, the BESTV versions up to V1.2.2, the WASU versions up toEPSS 0.6%CVE-2026-86553HIGHA password reset vulnerability in ZTE SmartLife APPEPSS 0.5%CVE-2023-25642MEDIUMTwo Vulnerabilities in Some ZTE Mobile Internet ProductsEPSS 0.5%CVE-2019-3414—All versions up to V1.19.20.02 of ZTE OTCP product are impacted by XSS vulnerability. Due to XSS, when an attacker invokes the security manaEPSS 0.5%CVE-2026-86550MEDIUMUXSS vulnerability in ZTE browser productsEPSS 0.5%CVE-2024-22064HIGHConfiguration error Vulnerability in ZTE ZXUN-ePDGEPSS 0.5%CVE-2019-3410MEDIUMAll versions up to UKBB_WF820+_1.0.0B06 of ZTE WF820+ LTE Outdoor CPE product are impacted by Cross-Site Request Forgery vulnerability,whichEPSS 0.5%CVE-2025-46583MEDIUMDOS Vulnerability in ZTE MC889A Pro productEPSS 0.4%CVE-2026-49007HIGHInformation leakage vulnerability in ZTE F689 productEPSS 0.4%CVE-2025-46580HIGHZTE GoldenDB Database product has a code-related vulnerabilityEPSS 0.4%CVE-2022-39068MEDIUMBuffer Overflow Vulnerability in ZTE MF296REPSS 0.4%CVE-2019-3431—All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have encryption problems vulnerability. Attackers could sniff unencryptEPSS 0.4%CVE-2025-26702MEDIUMImproper Input Validation vulnerability in ZTE GoldenDB allows Input Data Manipulation.This issue affects GoldenDB: from 6.1.03 through 6.1.EPSS 0.4%CVE-2025-46575MEDIUMZTE GoldenDB Database product has an information disclosure vulnerabilityEPSS 0.4%