Approved changes feed: RSS · Atom

cpe:2.3:h:zte:zxhn_f670:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorZte (a03dfd9f-ec80-5d2d-8d2d-86a72c3ab055)
ProductZxhn F670 (312f8586-577f-526d-b08f-4f37cbef31d5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-3418 not_vulnerable 2026-06-08 05:13:54.906191 Details available
MEDIUM (5.7)
All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by cross-site scripting vulnerability (XSS). Due to incomplete input validation, an authorized user can exploit this vulnerability to execute malicious scripts.
Published: 2019-08-15T14:44:35.000Z
Updated: 2024-08-04T19:12:08.613Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3417 not_vulnerable 2026-06-08 05:13:54.905499 Details available
HIGH (8.1)
All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by command injection vulnerability. Due to insufficient parameter validation check, an authorized user can exploit this vulnerability to take control of user router system.
Published: 2019-08-15T14:43:40.000Z
Updated: 2024-08-04T19:12:09.327Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7363 not_vulnerable 2026-06-08 05:12:03.643997 Details available
MEDIUM (4.3)
All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper authorization vulnerability. Since appviahttp service has no authorization delay, an attacker can be allowed to brute force account credentials.
Published: 2018-11-16T15:00:00.000Z
Updated: 2024-08-05T06:24:12.021Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7362 not_vulnerable 2026-06-08 05:12:03.643588 Details available
HIGH (7.5)
All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper access control vulnerability, which may allows an unauthorized user to perform unauthorized operations on the router.
Published: 2018-11-16T15:00:00.000Z
Updated: 2024-08-05T06:24:11.938Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7361 not_vulnerable 2026-06-08 05:12:03.643241 Details available
MEDIUM (6.5)
All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by null pointer dereference vulnerability, which may allows an attacker to cause a denial of service via appviahttp service.
Published: 2018-11-16T15:00:00.000Z
Updated: 2024-08-05T06:24:12.047Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7360 not_vulnerable 2026-06-08 05:12:03.642855 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7359 not_vulnerable 2026-06-08 05:12:03.642396 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.