CVE-2018-7364: ZTE ZXIN10

Critical severity, CVSS 9.8. EPSS: 10.3% chance of exploitation in the next 30 days.

All versions up to ZXINOS-RESV1.01.43 of the ZTE ZXIN10 product European region are impacted by improper access control vulnerability. Due to improper access control to devcomm process, an unauthorized remote attacker can exploit this vulnerability to execute arbitrary code with root privileges.

Affected products

• ZTE ZXIN10: before resv1.01.44 (fixed in resv1.01.44)

Published 2018-12-07. Last modified 2026-06-17.