CVE-2019-3417

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-08-15 · updated 2026-06-17
Weakness: CWE-78

Description

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by command injection vulnerability. Due to insufficient parameter validation check, an authorized user can exploit this vulnerability to take control of user router system.

Affected products

ZTE ZXHN F670: through 1.1.10p3t18

References

http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010163
http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010163

Get alerted when CVE-2019-3417 or the next vulnerability affects your stack