medium5.4
CVE-2019-3413
All versions up to V20.18.40.R7.B1of ZTE NetNumen DAP product have an XSS vulnerability.
Impact
All versions up to V20.18.40.R7.B1of ZTE NetNumen DAP product have an XSS vulnerability. Due to the lack of correct validation of client data in WEB applications, which results in users being hijacked.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zte | Netnumen Dap Firmware | through 20.18.40.r7.b1 |