Details of VAR-202104-2028

ID

VAR-202104-2028

TITLE

Command execution vulnerability exists in ZXHN H168N of ZTE Corporation

Trust: 0.6

sources: CNVD: CNVD-2021-18277

DESCRIPTION

ZTE Corporation is the world's leading provider of integrated communications solutions. ZTE Corporation ZXHN H168N has a command execution vulnerability. Attackers can use this vulnerability to execute arbitrary commands.

Trust: 0.6

sources: CNVD: CNVD-2021-18277

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2021-18277

AFFECTED PRODUCTS

vendor:

zte

model:

zxhn h168n

scope:

version:

Trust: 0.6

sources: CNVD: CNVD-2021-18277

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD:	CNVD-2021-18277
value:	HIGH
Trust: 0.6

CNVD:	CNVD-2021-18277
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

sources: CNVD: CNVD-2021-18277

EXTERNAL IDS

db:

CNVD

id:

CNVD-2021-18277

Trust: 0.6

sources: CNVD: CNVD-2021-18277

SOURCES

db:

CNVD

id:

CNVD-2021-18277

LAST UPDATE DATE

2022-05-04T08:52:06.021000+00:00

SOURCES UPDATE DATE

db:

CNVD

id:

CNVD-2021-18277

date:

2021-04-13T00:00:00

SOURCES RELEASE DATE

db:

CNVD

id:

CNVD-2021-18277

date:

2021-04-12T00:00:00