PT-2019-16579
CVE-2019-3427
·
Published
2019-11-22
·
Updated
2020-08-24
Description by
CVSS 3.1
7.2
HighMetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
ZTE ZXCDN IAMWEB version V6.01.03.01
Description
The issue allows an attacker to inject malicious code into the management page, potentially leading to users' information leakage. This is achieved through a code injection vulnerability.
Recommendations
For version V6.01.03.01, consider restricting access to the management page until a fix is available to prevent potential code injection attacks.
Found an issue in the description? Have something to add? Feel free to write us 👾