CVE-2018-7357

medium · 6.5

ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper access control vulnerability, which may allow an unauthorized user to gain unauthorized access.

6.5

CVSS

87.9%

EPSS (exploit prob.)

100th

EPSS percentile

2018-11-14

Published

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses

CWE-306

Affected products

Vendor	Product	Affected versions
zte	zxhn_h168n_firmware	2.2.0_pk1.2t2
zte	zxhn_h168n_firmware	2.2.0_pk1.2t5
zte	zxhn_h168n_firmware	2.2.0_pk11t
zte	zxhn_h168n_firmware	2.2.0_pk11t7
zte	zxhn_h168n	all versions

Check a specific version with /api/v1/cve/match.

References

http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1009523
https://www.exploit-db.com/exploits/45972/
http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1009523
https://www.exploit-db.com/exploits/45972/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2018-7357