ZTE Ox-330p Firmware vulnerabilities

2 CVEs affecting ZTE Ox-330p Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-7255, published 2017-08-29.

More from ZTE.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-3216, published 2017-06-20. Critical severity, CVSS 9.8. EPSS: 5.2% chance of exploitation in the next 30 days. WiMAX routers based on the MediaTek SDK (libmtk) that use a custom httpd plugin are vulnerable to an authentication bypass allowing a remote, unauthenticated attacker to gain administrator access to…
• CVE-2015-7255, published 2017-08-29. High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days. ZTE OX-330P, ZXHN H108N, W300V1.0.0S_ZRD_TR1_D68, HG110, GAN9.8T101A-B, MF28G, ZXHN H108N use non-unique X.509 certificates and SSH host keys, which might allow remote attackers to obtain credentials…