VULNERABILITY INTELLIGENCE

CVE-2018-7363

CVSS score4.3 MEDIUM
EPSS probability0.88%
CISA KEVNot currently listed
Published2018-11-16
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper authorization vulnerability. Since appviahttp service has no authorization delay, an attacker can be allowed to brute force account credentials.

Weakness classification

  • CWE-863: Incorrect Authorization

Primary references