What’s Vulnerable › Vulnerabilities

CVE-2019-3423

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-11-18 · updated 2026-06-17
• Weakness: CWE-22

Description

permission and access control vulnerability, which exists in V2.1.14 and below versions of C520V21 smart camera devices. An attacker can construct a URL for directory traversal and access to other unauthorized files or resources.

Affected products

• ZTE Corporation C520V21: through 2.1.14

References

• http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011842
• http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011842

Get alerted when CVE-2019-3423 or the next vulnerability affects your stack