CVE-2019-3412: ZTE MF920 Firmware

Critical severity, CVSS 9.8. EPSS: 2.9% chance of exploitation in the next 30 days.

All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by command execution vulnerability. Due to some interfaces do not adequately verify parameters, an attacker can execute arbitrary commands through specific interfaces.

Affected products

• ZTE MF920 Firmware: before bd_r218v2.4 (fixed in bd_r218v2.4)

Published 2019-06-11. Last modified 2026-06-17.