CVE-2017-10930: Critical severity zte zxr10 1800-2s firmware vulnerability
The ZXR10 1800-2S before v3.00.40 incorrectly restricts access to a resource from an unauthorized actor, resulting in ordinary users being able to download configuration files to steal information like administrator accounts and passwords.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-10930?
CVE-2017-10930 is considered a high severity vulnerability due to the potential for unauthorized access to sensitive configuration files.
How do I fix CVE-2017-10930?
To fix CVE-2017-10930, upgrade the ZXR10 1800-2S firmware to version v3.00.40 or later.
Who is affected by CVE-2017-10930?
The vulnerability CVE-2017-10930 affects users of ZTE ZXR10 1800-2S devices running firmware versions before v3.00.40.
What type of information can be stolen due to CVE-2017-10930?
Due to CVE-2017-10930, unauthorized actors can potentially download sensitive configuration files, including administrator accounts and passwords.
Is there a workaround for CVE-2017-10930?
There is no specific workaround for CVE-2017-10930; the recommended action is to upgrade the firmware as soon as possible.