CVE-2019-3431: Critical severity zte zxcloud goldendata vap vulnerability
All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have encryption problems vulnerability. Attackers could sniff unencrypted account and password through the network for front-end system access.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-3431?
CVE-2019-3431 is classified as a high severity vulnerability due to its potential for credential theft.
How do I fix CVE-2019-3431?
To fix CVE-2019-3431, upgrade the ZTE ZXCLOUD GoldenData VAP to version V4.01.01.02 or later, ensuring proper encryption is enabled.
What impact does CVE-2019-3431 have on my system?
CVE-2019-3431 allows attackers to intercept unencrypted user credentials, compromising front-end system access.
Is my version of ZTE ZXCLOUD GoldenData VAP affected by CVE-2019-3431?
Any version of ZTE ZXCLOUD GoldenData VAP up to and including V4.01.01.02 is affected by CVE-2019-3431.
Who can exploit CVE-2019-3431?
CVE-2019-3431 can be exploited by any remote attacker with access to the network traffic where the vulnerable system operates.