CVE-2019-3421

High

Description

The 7520V3V1.0.0B09P27 version, and all earlier versions of ZTE product ZX297520V3 are impacted by a Command Injection vulnerability. Unauthorized users can exploit this vulnerability to control the user terminal system.

SeverityHigh
CVSS8.0
Exploit probability—
ProductZtw Zx297520v3 Firmware
PublishedOct 31, 2019
First seenOct 31, 2019

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
ztw zx297520v3_firmwarev ≤ 7520v3v1.0.0b09p27—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.