Vulnerability Details CVE-2018-7363
All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper authorization vulnerability. Since appviahttp service has no authorization delay, an attacker can be allowed to brute force account credentials.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 24.1%
CVSS Severity
CVSS v3 Score 4.3
CVSS v2 Score 3.3
References
Products affected by CVE-2018-7363
-
cpe:2.3:h:zte:zxhn_f670:-
-
cpe:2.3:o:zte:zxhn_f670_firmware:-