CVE-2019-3428

Medium

Description

The version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a configuration error vulnerability. An attacker could directly access the management portal in HTTP, resulting in users’ information leakage.

SeverityMedium
CVSS6.5
Exploit probability—
ProductZte Zxcdn Iamweb Firmware
PublishedNov 22, 2019
First seenNov 22, 2019

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
zte zxcdn_iamweb_firmware6.01.03.01—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.