VULNERABILITY INTELLIGENCE

CVE-2018-7356

CVSS score5.6 MEDIUM
EPSS probability0.69%
CISA KEVNot currently listed
Published2018-11-01
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Description

All versions up to V3.03.10.B23P2 of ZTE ZXR10 8905E product are impacted by TCP Initial Sequence Number (ISN) reuse vulnerability, which can generate easily predictable ISN, and allows remote attackers to spoof connections.

Weakness classification

  • CWE-294: Authentication Bypass by Capture-replay

Primary references