VULNERABILITY INTELLIGENCE
CVE-2017-10933
CVSS score7.5 HIGH
EPSS probability2.09%
CISA KEVNot currently listed
Published2017-10-19
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
All versions prior to V2.06.00.00 of ZTE ZXDT22 SF01, an monitoring system of ZTE energy product, are impacted by directory traversal vulnerability that allows remote attackers to read arbitrary files on the system via a full path name after host address.
Weakness classification
- CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Primary references
- psirt@zte.com.cn — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory