ZTE Zxcloud Goldendata Vap vulnerabilities

3 CVEs affecting ZTE Zxcloud Goldendata Vap, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-3431, published 2019-12-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-3430, published 2019-12-23. Medium severity, CVSS 4.9. EPSS: 0.9% chance of exploitation in the next 30 days. All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have an information disclosure vulnerability. Attackers could use this vulnerability to collect data information and damage the…
CVE-2019-3429, published 2019-12-23. Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days. All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have a file reading vulnerability. Attackers could obtain log file information without authorization, causing the disclosure of…
CVE-2019-3431, published 2019-12-23. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have encryption problems vulnerability. Attackers could sniff unencrypted account and password through the network for front-end…