medium6.5Public exploit code
CVE-2018-7358
ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper change control vulnerability, which may al…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ZTE ZXHN H168N - Improper Access Restrictions2018-12-11 · webapps · hardware · Verified
Impact
ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper change control vulnerability, which may allow an unauthorized user to perform unauthorized operations.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zte | Zxhn H168n Firmware | Versions 2.2.0_pk1.2t2, 2.2.0_pk1.2t5, 2.2.0_pk11t, 2.2.0_pk11t7 |
Weakness classification
References
- NVD record
- CVE.org record
- http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1009523
- http://www.securityfocus.com/bid/105963
- https://www.exploit-db.com/exploits/45972/
- http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1009523
- http://www.securityfocus.com/bid/105963
- https://www.exploit-db.com/exploits/45972/