Approved changes feed: RSS · Atom

cpe:2.3:o:zte:zxhn_f670_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorZte (a03dfd9f-ec80-5d2d-8d2d-86a72c3ab055)
ProductZxhn F670 Firmware (c688bfaa-c63e-5c4b-b38e-d2fcf179047d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-3418 vulnerable 2026-06-08 05:13:54.906165 Details available
MEDIUM (5.7)
All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by cross-site scripting vulnerability (XSS). Due to incomplete input validation, an authorized user can exploit this vulnerability to execute malicious scripts.
Published: 2019-08-15T14:44:35.000Z
Updated: 2024-08-04T19:12:08.613Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3417 vulnerable 2026-06-08 05:13:54.904960 Details available
HIGH (8.1)
All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by command injection vulnerability. Due to insufficient parameter validation check, an authorized user can exploit this vulnerability to take control of user router system.
Published: 2019-08-15T14:43:40.000Z
Updated: 2024-08-04T19:12:09.327Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7363 vulnerable 2026-06-08 05:12:03.643973 Details available
MEDIUM (4.3)
All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper authorization vulnerability. Since appviahttp service has no authorization delay, an attacker can be allowed to brute force account credentials.
Published: 2018-11-16T15:00:00.000Z
Updated: 2024-08-05T06:24:12.021Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7362 vulnerable 2026-06-08 05:12:03.643565 Details available
HIGH (7.5)
All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper access control vulnerability, which may allows an unauthorized user to perform unauthorized operations on the router.
Published: 2018-11-16T15:00:00.000Z
Updated: 2024-08-05T06:24:11.938Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7361 vulnerable 2026-06-08 05:12:03.643217 Details available
MEDIUM (6.5)
All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by null pointer dereference vulnerability, which may allows an attacker to cause a denial of service via appviahttp service.
Published: 2018-11-16T15:00:00.000Z
Updated: 2024-08-05T06:24:12.047Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7360 vulnerable 2026-06-08 05:12:03.642831 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7359 vulnerable 2026-06-08 05:12:03.641877 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.