CVEvulnerability

CVE-2018-7366

6.8 MEDIUM Published 2018-12-28 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-12-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
4.3 MEDIUM — CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS 3.0 ([email protected])
6.8 MEDIUM — CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-863

Description

ZTE ZXV10 B860AV2.1 product ChinaMobile branch with the ICNT versions up to V1.3.3, the BESTV versions up to V1.2.2, the WASU versions up to V1.1.7 and the MGTV versions up to V1.4.6 have an authentication bypass vulnerability, which may allows an unauthorized user to perform unauthorized operations.

Affected configurations

• zte zxv10 b860av2.1 chinamobile firmware (< icnt v1.3.3) • zte zxv10 b860av2.1 chinamobile firmware (< bestv v1.2.2) • zte zxv10 b860av2.1 chinamobile firmware (< wasu v1.1.7) • zte zxv10 b860av2.1 chinamobile firmware (< mgtv v1.4.6)

Related

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References