Details of VAR-202104-2033

ID

VAR-202104-2033

TITLE

Command execution vulnerability exists in ZXHN F460 of ZTE Corporation

Trust: 0.6

sources: CNVD: CNVD-2021-18294

DESCRIPTION

ZXHN F460 is the optical modem of ZTE's EPON mode. A command execution vulnerability exists in ZXHN F460 of ZTE Corporation. Attackers can use this vulnerability to execute arbitrary commands.

Trust: 0.6

sources: CNVD: CNVD-2021-18294

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2021-18294

AFFECTED PRODUCTS

vendor:

zte

model:

zxhn f460

scope:

version:

Trust: 0.6

sources: CNVD: CNVD-2021-18294

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD:	CNVD-2021-18294
value:	HIGH
Trust: 0.6

CNVD:	CNVD-2021-18294
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

sources: CNVD: CNVD-2021-18294

EXTERNAL IDS

db:

CNVD

id:

CNVD-2021-18294

Trust: 0.6

sources: CNVD: CNVD-2021-18294

SOURCES

db:

CNVD

id:

CNVD-2021-18294

LAST UPDATE DATE

2022-05-04T09:27:43.042000+00:00

SOURCES UPDATE DATE

db:

CNVD

id:

CNVD-2021-18294

date:

2021-04-19T00:00:00

SOURCES RELEASE DATE

db:

CNVD

id:

CNVD-2021-18294

date:

2021-04-12T00:00:00