CVE-2018-7356: ZTE ZXR10 8905e Firmware

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

All versions up to V3.03.10.B23P2 of ZTE ZXR10 8905E product are impacted by TCP Initial Sequence Number (ISN) reuse vulnerability, which can generate easily predictable ISN, and allows remote attackers to spoof connections.

Affected products

• ZTE ZXR10 8905e Firmware: up to and including 3.03.10.b23p2

Published 2018-11-01. Last modified 2026-06-17.