{"id":"CVE-2019-3411","state":"PUBLISHED","title":"All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by information leak vulnerability. Due to some interfaces can obtain the WebUI login password without login, an att","description":"All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by information leak vulnerability. Due to some interfaces can obtain the WebUI login password without login, an attacker can exploit the vulnerability to obtain sensitive information about the affected components.","publishedAt":"2019-06-11T19:19:20.000Z","updatedAt":"2024-08-04T19:12:09.354Z","severity":{"score":8.1,"label":"High","version":"3.0","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","source":"zte"},"assigner":"zte","products":["ZTE ZTE MF920"],"affected":[{"vendor":"ZTE","product":"ZTE MF920","versions":[{"version":"unspecified","status":"affected","lessThanOrEqual":"All versions up to BD_R218V2.4","versionType":"custom"}]}],"references":["http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010686"],"weaknesses":[],"ingestedAt":"2026-10-29T19:45:59.128Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/3xxx/CVE-2019-3411.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2019-3411","state":"PUBLISHED","datePublished":"2019-06-11T19:19:20.000Z","dateUpdated":"2024-08-04T19:12:09.354Z","assignerShortName":"zte","assignerOrgId":"6786b568-6808-4982-b61f-398b0d9679eb","dateReserved":"2018-12-31T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by information leak vulnerability. Due to some interfaces can obtain the WebUI login password without login, an attacker can exploit the vulnerability to obtain sensitive information about the affected components."}],"affected":[{"vendor":"ZTE","product":"ZTE MF920","versions":[{"version":"unspecified","status":"affected","lessThanOrEqual":"All versions up to BD_R218V2.4","versionType":"custom"}]}],"references":[{"url":"http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010686","tags":["x_refsource_CONFIRM"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.0"}}],"problemTypes":[{"descriptions":[{"description":"Command Injection","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"zte","dateUpdated":"2019-06-11T19:19:20.000Z","orgId":"6786b568-6808-4982-b61f-398b0d9679eb"},"datePublic":"2019-05-30T00:00:00.000Z","source":{"discovery":"UNKNOWN"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@zte.com.cn","ID":"CVE-2019-3411","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"ZTE MF920","version":{"version_data":[{"affected":"<=","version_affected":"<=","version_value":"All versions up to BD_R218V2.4"}]}}]},"vendor_name":"ZTE"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by information leak vulnerability. Due to some interfaces can obtain the WebUI login password without login, an attacker can exploit the vulnerability to obtain sensitive information about the affected components."}]},"impact":{"cvss":{"attackComplexity":"HIGH","attackVector":"NONE","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.0"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Command Injection"}]}]},"references":{"reference_data":[{"name":"http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010686","refsource":"CONFIRM","url":"http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010686"}]},"source":{"discovery":"UNKNOWN"}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010686","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T19:12:09.354Z"}}]}}}