CVE-2019-3431: ZTE Zxcloud Goldendata Vap

Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days.

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have encryption problems vulnerability. Attackers could sniff unencrypted account and password through the network for front-end system access.

Affected products

• ZTE Zxcloud Goldendata Vap: up to and including zxivs-vap-portal-xzgav4.01.01.02

Published 2019-12-23. Last modified 2026-06-17.