CVE-2019-3411: Command Injection
All versions up to BDR218V2.4 of ZTE MF920 product are impacted by information leak vulnerability. Due to some interfaces can obtain the WebUI login password without login, an attacker can exploit the vulnerability to obtain sensitive information about the affected components.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2019-3411?
CVE-2019-3411 is classified as a medium severity vulnerability due to the potential for sensitive information leakage.
How do I fix CVE-2019-3411?
To fix CVE-2019-3411, upgrade to software version BD_R218V2.4 or later.
What is the impact of CVE-2019-3411?
The impact of CVE-2019-3411 is that an attacker can obtain the WebUI login password without authentication.
Which devices are affected by CVE-2019-3411?
All ZTE MF920 devices with firmware versions up to BD_R218V2.4 are affected by CVE-2019-3411.
Can CVE-2019-3411 lead to unauthorized access?
Yes, CVE-2019-3411 can potentially lead to unauthorized access due to the exposure of login credentials.