ZTE Zxcdn Iamweb Firmware vulnerabilities

2 CVEs affecting ZTE Zxcdn Iamweb Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-3428, published 2019-11-22.

More from ZTE.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-3427, published 2019-11-22. High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days. The version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a code injection vulnerability. An attacker could exploit the vulnerability to inject malicious code into the management page,…
• CVE-2019-3428, published 2019-11-22. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. The version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a configuration error vulnerability. An attacker could directly access the management portal in HTTP, resulting in users’…