CVE-2019-3411: ZTE MF920 Firmware

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by information leak vulnerability. Due to some interfaces can obtain the WebUI login password without login, an attacker can exploit the vulnerability to obtain sensitive information about the affected components.

Affected products

• ZTE MF920 Firmware: before bd_r218v2.4 (fixed in bd_r218v2.4)

Published 2019-06-11. Last modified 2026-06-17.