CVE-2018-7364: Critical severity zte zxin10 cms vulnerability
All versions up to ZXINOS-RESV1.01.43 of the ZTE ZXIN10 product European region are impacted by improper access control vulnerability. Due to improper access control to devcomm process, an unauthorized remote attacker can exploit this vulnerability to execute arbitrary code with root privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-7364?
CVE-2018-7364 has been classified as a high severity vulnerability due to the potential for unauthorized code execution with root privileges.
How do I fix CVE-2018-7364?
To fix CVE-2018-7364, upgrade your ZTE ZXIN10 product to version RESV1.01.44 or later.
Who is affected by CVE-2018-7364?
CVE-2018-7364 affects all versions up to ZXINOS-RESV1.01.43 of the ZTE ZXIN10 product in the European region.
What type of vulnerability is CVE-2018-7364?
CVE-2018-7364 is classified as an improper access control vulnerability.
Can an attacker exploit CVE-2018-7364 remotely?
Yes, an unauthorized remote attacker can exploit CVE-2018-7364 to execute arbitrary code with root privileges.