Back to feed
EUVD-2021-8901 · Published Apr 13, 2021
Some ZTE products have CSRF vulnerability. Because some pages lack CSRF random value verification, attackers could perform illegal authorization operations by constructing messages.This affects: ZXHN H168N V3.5.0_EG1T5_TE, V2.5.5, ZXHN H108N V2.5.5_BTMT1
Technologies
Zte Zxhn H108N FirmwareZte Zxhn H168NZte Zxhn H168N FirmwareZte Zxhn H108N
Weaknesses
CWE-330CWE-352
CVSS scores
- v3.16.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N - v2.04.3
AV:N/AC:M/Au:N/C:N/I:P/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access Credential Access
References
Potentially impacted assets
See if this affects your attack surface
