CVE-2018-7363: High severity zte zxhn f670 firmware vulnerability
All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper authorization vulnerability. Since appviahttp service has no authorization delay, an attacker can be allowed to brute force account credentials.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-7363?
The severity of CVE-2018-7363 is considered high due to the potential for unauthorized access through brute force attacks.
How do I fix CVE-2018-7363?
To fix CVE-2018-7363, upgrade the ZTE ZXHN F670 to version 1.1.10P3T18 or later.
What can an attacker do with CVE-2018-7363?
An attacker can exploit CVE-2018-7363 to brute force account credentials, allowing unauthorized access to the device.
Which versions of ZTE ZXHN F670 are affected by CVE-2018-7363?
All versions up to and including V1.1.10P3T18 of ZTE ZXHN F670 are affected by CVE-2018-7363.
Is the appviahttp service related to CVE-2018-7363?
Yes, the appviahttp service is involved in CVE-2018-7363 as it has no authorization delay, enabling brute force attacks.