What is the severity of CVE-2019-3431?

CVE-2019-3431 is classified as a high severity vulnerability due to its potential for credential theft.

How do I fix CVE-2019-3431?

To fix CVE-2019-3431, upgrade the ZTE ZXCLOUD GoldenData VAP to version V4.01.01.02 or later, ensuring proper encryption is enabled.

What impact does CVE-2019-3431 have on my system?

CVE-2019-3431 allows attackers to intercept unencrypted user credentials, compromising front-end system access.

Is my version of ZTE ZXCLOUD GoldenData VAP affected by CVE-2019-3431?

Any version of ZTE ZXCLOUD GoldenData VAP up to and including V4.01.01.02 is affected by CVE-2019-3431.

Who can exploit CVE-2019-3431?

CVE-2019-3431 can be exploited by any remote attacker with access to the network traffic where the vulnerable system operates.

Vulnerability/
CVE-2019-3431

critical

9.8

CWE

311 522

23/12/2019

4/8/2024

CVE-2019-3431

First published: Mon Dec 23 2019(Updated: )

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have encryption problems vulnerability. Attackers could sniff unencrypted account and password through the network for front-end system access.

Credit: psirt@zte.com.cn

Affected Software	Affected Version	How to fix
ZTE ZXCLOUD GoldenData VAP	<=zxivs-vap-portal-xzgav4.01.01.02

Never miss a vulnerability like this again

Reference Links

http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1012023

Frequently Asked Questions

What is the severity of CVE-2019-3431?
CVE-2019-3431 is classified as a high severity vulnerability due to its potential for credential theft.
How do I fix CVE-2019-3431?
To fix CVE-2019-3431, upgrade the ZTE ZXCLOUD GoldenData VAP to version V4.01.01.02 or later, ensuring proper encryption is enabled.
What impact does CVE-2019-3431 have on my system?
CVE-2019-3431 allows attackers to intercept unencrypted user credentials, compromising front-end system access.
Is my version of ZTE ZXCLOUD GoldenData VAP affected by CVE-2019-3431?
Any version of ZTE ZXCLOUD GoldenData VAP up to and including V4.01.01.02 is affected by CVE-2019-3431.
Who can exploit CVE-2019-3431?
CVE-2019-3431 can be exploited by any remote attacker with access to the network traffic where the vulnerable system operates.

collector/nvd-index
agent/weakness
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/severity
agent/references
agent/author
agent/last-modified-date
agent/tags
agent/description
agent/first-publish-date
agent/event
agent/source
vendor/zte
canonical/zte zxcloud goldendata vap
version/zte zxcloud goldendata vap/zxivs-vap-portal-xzgav4.01.01.02

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2019-3431?
CVE-2019-3431 is classified as a high severity vulnerability due to its potential for credential theft.
How do I fix CVE-2019-3431?
To fix CVE-2019-3431, upgrade the ZTE ZXCLOUD GoldenData VAP to version V4.01.01.02 or later, ensuring proper encryption is enabled.
What impact does CVE-2019-3431 have on my system?
CVE-2019-3431 allows attackers to intercept unencrypted user credentials, compromising front-end system access.
Is my version of ZTE ZXCLOUD GoldenData VAP affected by CVE-2019-3431?
Any version of ZTE ZXCLOUD GoldenData VAP up to and including V4.01.01.02 is affected by CVE-2019-3431.
Who can exploit CVE-2019-3431?
CVE-2019-3431 can be exploited by any remote attacker with access to the network traffic where the vulnerable system operates.