CVE-2017-10931

2017-08-1000:00:00

zte

www.cve.org

0.002 Low

EPSS

Percentile

56.7%

JSON

The ZXR10 1800-2S before v3.00.40 incorrectly restricts the download of the file directory range for WEB users, resulting in the ability to download any files and cause information leaks such as system configuration.

CNA Affected

[
  {
    "product": "ZX10 1800-2S",
    "vendor": "ZTE",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to V3.00.40"
      }
    ]
  }
]

References

support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008262

0.002 Low

EPSS

Percentile

56.7%

JSON

Related for CVELIST:CVE-2017-10931