{"id":"CVE-2018-7360","state":"PUBLISHED","title":"All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by information exposure vulnerability, which may allow an unauthenticated attacker to get the GPON SN informat","description":"All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by information exposure vulnerability, which may allow an unauthenticated attacker to get the GPON SN information via appviahttp service.","publishedAt":"2018-11-16T15:00:00.000Z","updatedAt":"2024-08-05T06:24:11.935Z","severity":{"score":9.6,"label":"Critical","version":"3.0","vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","source":"zte"},"assigner":"zte","products":["ZTE ZXHN F670"],"affected":[{"vendor":"ZTE","product":"ZXHN F670","versions":[{"version":"unspecified","status":"affected","lessThanOrEqual":"V1.1.10P3T18","versionType":"custom"}]}],"references":["http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1009383"],"weaknesses":[],"ingestedAt":"2026-10-29T19:45:00.684Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2018/7xxx/CVE-2018-7360.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2018-7360","state":"PUBLISHED","datePublished":"2018-11-16T15:00:00.000Z","dateUpdated":"2024-08-05T06:24:11.935Z","assignerShortName":"zte","assignerOrgId":"6786b568-6808-4982-b61f-398b0d9679eb","dateReserved":"2018-02-22T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by information exposure vulnerability, which may allow an unauthenticated attacker to get the GPON SN information via appviahttp service."}],"affected":[{"vendor":"ZTE","product":"ZXHN F670","versions":[{"version":"unspecified","status":"affected","lessThanOrEqual":"V1.1.10P3T18","versionType":"custom"}]}],"references":[{"url":"http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1009383","tags":["x_refsource_CONFIRM"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"LOW","attackVector":"ADJACENT_NETWORK","availabilityImpact":"HIGH","baseScore":9.6,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","version":"3.0"}}],"problemTypes":[{"descriptions":[{"description":"Information Exposure","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"zte","dateUpdated":"2018-11-16T14:57:01.000Z","orgId":"6786b568-6808-4982-b61f-398b0d9679eb"},"datePublic":"2018-11-16T00:00:00.000Z","source":{"discovery":"UNKNOWN"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@zte.com.cn","ID":"CVE-2018-7360","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"ZXHN F670","version":{"version_data":[{"affected":"<=","version_affected":"<=","version_value":"V1.1.10P3T18"}]}}]},"vendor_name":"ZTE"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by information exposure vulnerability, which may allow an unauthenticated attacker to get the GPON SN information via appviahttp service."}]},"impact":{"cvss":{"attackComplexity":"LOW","attackVector":"ADJACENT_NETWORK","availabilityImpact":"HIGH","baseScore":9.6,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","version":"3.0"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Information Exposure"}]}]},"references":{"reference_data":[{"name":"http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1009383","refsource":"CONFIRM","url":"http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1009383"}]},"source":{"discovery":"UNKNOWN"}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1009383","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T06:24:11.935Z"}}]}}}