PT-2018-18043

CVE-2018-7356

·

Published

2018-11-01

·

Updated

2019-10-09

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions ZTE ZXR10 8905E versions prior to V3.03.10.B23P2
Description The issue is related to TCP Initial Sequence Number (ISN) reuse, which can generate easily predictable ISN. This allows remote attackers to spoof connections.
Recommendations For versions prior to V3.03.10.B23P2, update to version V3.03.10.B23P2 or later to resolve the issue.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-294: Authentication Bypass by Capture-replay
Related identifiers
CVE-2018-7356
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com