high7.5
CVE-2017-10931
The ZXR10 1800-2S before v3.00.40 incorrectly restricts the download of the file directory range for WEB users, resulting in the ability to download any files …
Impact
The ZXR10 1800-2S before v3.00.40 incorrectly restricts the download of the file directory range for WEB users, resulting in the ability to download any files and cause information leaks such as system configuration.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zte | Zxr10 1800-2s Firmware | before 3.00.40 |
| Zte | Zxr10 2800-4 Firmware | before 3.00.40 |
| Zte | Zxr10 3800-8 Firmware | before 3.00.40 |
| Zte | Zxr10 160 Firmware | before 3.00.40 |