ZTE WF820+ Lte Outdoor CPE Firmware vulnerabilities

2 CVEs affecting ZTE WF820+ Lte Outdoor CPE Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-3410, published 2019-06-11.

More from ZTE.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-3409, published 2019-06-11. High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days. All versions up to UKBB_WF820+_1.0.0B06 of ZTE WF820+ LTE Outdoor CPE product are impacted by command injection vulnerability. Due to inadequate parameter verification, unauthorized users can take…
• CVE-2019-3410, published 2019-06-11. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. All versions up to UKBB_WF820+_1.0.0B06 of ZTE WF820+ LTE Outdoor CPE product are impacted by Cross-Site Request Forgery vulnerability,which stems from the fact that WEB applications do not…