Zxr10 1800 2S Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:zte:zxr10_1800-2s_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Zte (a03dfd9f-ec80-5d2d-8d2d-86a72c3ab055) |
|---|---|
| Product | Zxr10 1800 2S Firmware (c1c4e575-5ed0-523a-950b-5cb7f1247b42) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-22068 |
vulnerable | 2026-06-08 06:29:33.569570 |
Weak Password Vulnerability in ZTE ZSR V2 Intelligent Multi Service Router
MEDIUM (6)
Improper Privilege Management vulnerability in ZTE ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series on 64 bit allows Functionality Bypass.This issue affects ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series: V4.00.10 and earlier.
Published: 2024-10-10T08:51:35.299Z
Updated: 2024-10-10T13:38:50.810Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22066 |
vulnerable | 2026-06-08 06:29:33.549689 |
Details available
HIGH (7.5)
There is a privilege escalation vulnerability in ZTE ZXR10 ZSR V2 intelligent multi service router . An authenticated attacker could use the vulnerability to obtain sensitive information about the device.
Published: 2024-10-29T09:03:36.687Z
Updated: 2024-10-29T15:06:23.937Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-10935 |
vulnerable | 2026-06-08 05:08:36.582351 |
Details available
All versions prior to ZSRV2 V3.00.40 of the ZTE ZXR10 1800-2S products allow remote authenticated users to bypass the original password authentication protection to change other user's password.
Published: 2018-07-25T15:00:00.000Z
Updated: 2024-09-16T20:01:55.652Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-10931 |
vulnerable | 2026-06-08 05:08:36.565092 |
Details available
The ZXR10 1800-2S before v3.00.40 incorrectly restricts the download of the file directory range for WEB users, resulting in the ability to download any files and cause information leaks such as system configuration.
Published: 2017-09-19T14:00:00.000Z
Updated: 2024-09-17T03:37:33.507Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-10930 |
vulnerable | 2026-06-08 05:08:36.559905 |
Details available
The ZXR10 1800-2S before v3.00.40 incorrectly restricts access to a resource from an unauthorized actor, resulting in ordinary users being able to download configuration files to steal information like administrator accounts and passwords.
Published: 2017-09-19T14:00:00.000Z
Updated: 2024-09-16T17:33:43.111Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.