Approved changes feed: RSS · Atom

cpe:2.3:a:zte:zxedm_iems:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorZte (a03dfd9f-ec80-5d2d-8d2d-86a72c3ab055)
ProductZxedm Iems (7f343b70-55e4-5775-bc43-6b1d81f08012)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-40436 vulnerable 2026-06-08 08:01:20.753308 ZTE ZXEDM iEMS product has a password reset vulnerability
HIGH (7.1)
The ZTE ZXEDM iEMS product has a password reset vulnerability for any user.Because the management of the cloud EMS portal does not properly control access to the user list acquisition function, attackers can read all user list information through the user list interface. Attackers can reset the passwords of obtained user information, causing risks such as unauthorized operations.
Published: 2026-04-13T06:31:49.372Z
Updated: 2026-04-13T13:01:38.521Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.