CVE-2019-3423

2019-11-1818:19:44

zte

www.cve.org

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

40.6%

JSON

permission and access control vulnerability, which exists in V2.1.14 and below versions of C520V21 smart camera devices. An attacker can construct a URL for directory traversal and access to other unauthorized files or resources.

CNA Affected

[
  {
    "product": "C520V21",
    "vendor": "ZTE Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "All versions up to V2.1.14"
      }
    ]
  }
]

References

support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011842