critical9.8
CVE-2019-3412
All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by command execution vulnerability.
Impact
All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by command execution vulnerability. Due to some interfaces do not adequately verify parameters, an attacker can execute arbitrary commands through specific interfaces.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zte | Mf920 Firmware | before bd_r218v2.4 |