Description
There is a permission and access control vulnerability of ZTE's ZXV10 XT802/ET301 product.Attackers with common permissions can log in the terminal web and change the password of the administrator illegally by intercepting requests to change the passwords.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
ZTE ZXV10 XT802
Default version status: unaffected
All versions up to V2.24.10P1 to < V2.24.10P1affected
ZTE ZXV10 ET301
Default version status: unaffected
All versions up to V3.22.11P3 to < V3.22.11P3affected