PT-2019-16569
CVE-2019-3417
·
Published
2019-08-15
·
Updated
2023-03-03
Description by
CVSS 2.0
9.0
HighMetricsAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
ZTE ZXHN F670 versions prior to V1.1.10P3T18
Description
The issue is related to a command injection vulnerability due to insufficient parameter validation check. This allows an authorized user to exploit the vulnerability and take control of the user router system.
Recommendations
For versions prior to V1.1.10P3T18, update to a version that includes the necessary security patches to fix the command injection vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾