PT-2019-16563
CVE-2019-3411
·
Published
2019-06-11
·
Updated
2022-04-18
Description by
CVSS 3.1
8.1
HighMetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
ZTE MF920 versions up to BD R218V2.4
Description
The issue allows an attacker to obtain sensitive information about the affected components due to certain interfaces being able to obtain the WebUI login password without requiring a login. This is an information leak issue.
Recommendations
For versions up to BD R218V2.4, update to a version later than BD R218V2.4 to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾