PT-2019-16579

CVE-2019-3427

·

Published

2019-11-22

·

Updated

2020-08-24

Description by

CVSS 3.1
7.2
High
MetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions ZTE ZXCDN IAMWEB version V6.01.03.01
Description The issue allows an attacker to inject malicious code into the management page, potentially leading to users' information leakage. This is achieved through a code injection vulnerability.
Recommendations For version V6.01.03.01, consider restricting access to the management page until a fix is available to prevent potential code injection attacks.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾