# cve.now: ZTE

The newest entries naming ZTE as an affected vendor (up to 200), of 131 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-118871](https://cve.now/CVE-2026-118871.md): SQL Injection vulnerability in ZTE ElasticNet RNIA R18 NGI product (CVSS 6.5)
- [CVE-2026-108506](https://cve.now/CVE-2026-108506.md): Unauthorized access vulnerability in ZTE Z80 Ultra product (CVSS 5.5)
- [CVE-2026-108505](https://cve.now/CVE-2026-108505.md): Information disclosure vulnerability in ZTE Z80 Ultra product (CVSS 3.3)
- [CVE-2026-108504](https://cve.now/CVE-2026-108504.md): Unauthorized information retrieval vulnerability in ZTE Z80 Ultra product (CVSS 5.5)
- [CVE-2026-108503](https://cve.now/CVE-2026-108503.md): Unauthorized information acquisition vulnerability in ZTE Z80 Ultra product (CVSS 3.3)
- [CVE-2026-108502](https://cve.now/CVE-2026-108502.md): Information disclosure vulnerability in ZTE Z80 Ultra product (CVSS 3.3)
- [CVE-2026-108501](https://cve.now/CVE-2026-108501.md): Unauthorized access vulnerability in ZTE Z80 Ultra product (CVSS 5.7)
- [CVE-2026-86556](https://cve.now/CVE-2026-86556.md): An information disclosure vulnerability in ZTE U30 Air product (CVSS 5.3)
- [CVE-2026-86555](https://cve.now/CVE-2026-86555.md): Hardcoded Key Vulnerability in ZTE SmartLife APP (CVSS 6.2)
- [CVE-2026-86554](https://cve.now/CVE-2026-86554.md): Email enumeration and account ID leakage vulnerabilities in ZTE SmartLife APP (CVSS 4.3)
- [CVE-2026-86553](https://cve.now/CVE-2026-86553.md): A password reset vulnerability in ZTE SmartLife APP (CVSS 8.8)
- [CVE-2026-86552](https://cve.now/CVE-2026-86552.md): A vulnerability that skips email ownership verification for account registration in ZTE SmartLife APP (CVSS 5.4)
- [CVE-2026-86551](https://cve.now/CVE-2026-86551.md): Wi-Fi MAC Address Obtainment by Non-privileged Program Vulnerability in ZTE Z80Ultra (NX741J) product (CVSS 3.3)
- [CVE-2026-86550](https://cve.now/CVE-2026-86550.md): UXSS vulnerability in ZTE browser products (CVSS 6.5)
- [CVE-2026-49003](https://cve.now/CVE-2026-49003.md): Unauthenticated RCE Vulnerability in ZTE ZXDU68 S202 V5.0 Product (CVSS 9.6)
- [CVE-2026-9668](https://cve.now/CVE-2026-9668.md): SQL injection vulnerability in ZTE SCP product (CVSS 6.3)
- [CVE-2026-49008](https://cve.now/CVE-2026-49008.md): Integrity‑check credential leakage vulnerability in an application function of ZTE F689 product (CVSS 6.5)
- [CVE-2026-49007](https://cve.now/CVE-2026-49007.md): Information leakage vulnerability in ZTE F689 product (CVSS 7.5)
- [CVE-2026-49006](https://cve.now/CVE-2026-49006.md): TLS credential leakage vulnerability in ZTE F689 product (CVSS 5.3)
- [CVE-2026-49005](https://cve.now/CVE-2026-49005.md): Root password hash exposure vulnerability in ZTE F689 product (CVSS 2.4)
- [CVE-2026-8029](https://cve.now/CVE-2026-8029.md): SQL Injection Vulnerability in ZTE SmartLife App (CVSS 3.9)
- [CVE-2026-49004](https://cve.now/CVE-2026-49004.md): PostgreSQL Misconfiguration and Command Injection Vulnerability in ZTE NX799J (Red Magic 11 Air) Product (CVSS 6.5)
- [CVE-2026-40000](https://cve.now/CVE-2026-40000.md): Path Traversal Vulnerability in ZTE Blade A75 5G (CVSS 1.8)
- [CVE-2026-49002](https://cve.now/CVE-2026-49002.md): Broken Access Control Vulnerabily in ZTE ZXUniPOS NDS-LTE product (CVSS 9.1)
- [CVE-2026-49001](https://cve.now/CVE-2026-49001.md): Cross-Site Request Forgery (CSRF) vulnerability in ZTE ZXUniPOS NDS-LTE product (CVSS 5.3)
- [CVE-2026-49000](https://cve.now/CVE-2026-49000.md): Cryptography Implementation Flaw vulnerability in ZTE ZXUniPOS NDS-LTE product (CVSS 7.0)
- [CVE-2026-48999](https://cve.now/CVE-2026-48999.md): Stored Cross-Site Scripting (XSS) vulnerability in ZTE ZXUniPOS NDS-LTE product (CVSS 5.7)
- [CVE-2026-44410](https://cve.now/CVE-2026-44410.md): Function Abusement Vulnerability in ZTE ZXUniPOS NDS-LTE (CVSS 3.8)
- [CVE-2026-44409](https://cve.now/CVE-2026-44409.md): Information disclosure vulnerability in ZTE MU5250 (CVSS 5.7)
- [CVE-2026-44408](https://cve.now/CVE-2026-44408.md): Unauthorized access vulnerability in ZTE MU5250 (CVSS 6.3)
- [CVE-2026-44407](https://cve.now/CVE-2026-44407.md): Remote Denial of Service Vulnerability Exists in ZTE Cloud PC Client uSmartview (CVSS 4.7)
- [CVE-2026-44406](https://cve.now/CVE-2026-44406.md): DLL Hijacking Vulnerability in ZTE Cloud PC Client uSmartview (CVSS 5.7)
- [CVE-2026-40004](https://cve.now/CVE-2026-40004.md): openssl.cnf Privilege Escalation Vulnerability in ZTE Cloud PC Client uSmartview (CVSS 5.5)
- [CVE-2026-40003](https://cve.now/CVE-2026-40003.md): USB-based arbitrary memory write vulnerability in ZTE ZX297520V3 soc BootROM (CVSS 5.1)
- [CVE-2026-40001](https://cve.now/CVE-2026-40001.md): Local privilege escalation vulnerability in ZTE PROCESS Guard service of the cloud computer client (CVSS 5.2)
- [CVE-2026-40002](https://cve.now/CVE-2026-40002.md): ZTE Red Magic 11 Pro (NX809J) contains a vulnerability that allows non-privileged applications to trigger sensitive operations. (CVSS 5.0)
- [CVE-2026-40436](https://cve.now/CVE-2026-40436.md): ZTE ZXEDM iEMS product has a password reset vulnerability (CVSS 7.1)
- [CVE-2025-66315](https://cve.now/CVE-2025-66315.md): ZTE MF258K Pro Version Server has a Configuration Defect Vulnerability (CVSS 4.3)
- [CVE-2025-66314](https://cve.now/CVE-2025-66314.md): Improper Privilege Management vulnerability in ZTE ElasticNet UME R32 on Linux allows Accessing Functionality Not Properly Constrained by AC (CVSS 7.5)
- [CVE-2025-46583](https://cve.now/CVE-2025-46583.md): DOS Vulnerability in ZTE MC889A Pro product (CVSS 5.3)
- [CVE-2025-46582](https://cve.now/CVE-2025-46582.md): Private Key Disclosure Vulnerability in ZTE ZXMP M721 Product (CVSS 7.7)
- [CVE-2025-46581](https://cve.now/CVE-2025-46581.md): ZTE ZXCDN product has a Struts RCE Vulnerability (CVSS 9.8)
- [CVE-2025-26711](https://cve.now/CVE-2025-26711.md): There is an unauthorized access vulnerability in ZTE T5400. (CVSS 5.7)
- [CVE-2025-26710](https://cve.now/CVE-2025-26710.md): There is an an information disclosure vulnerability in ZTE T5400. (CVSS 3.5)
- [CVE-2025-26709](https://cve.now/CVE-2025-26709.md): Unauthorized Access Vulnerability in ZTE F50 (CVSS 5.7)
- [CVE-2025-46580](https://cve.now/CVE-2025-46580.md): ZTE GoldenDB Database product has a code-related vulnerability (CVSS 7.7)
- [CVE-2025-46579](https://cve.now/CVE-2025-46579.md): ZTE GoldenDB Database product has a DDE injection vulnerability (CVSS 8.4)
- [CVE-2025-46578](https://cve.now/CVE-2025-46578.md): ZTE GoldenDB Database product has SQL injection vulnerabilities in multiple interfaces (CVSS 6.5)
- [CVE-2025-46577](https://cve.now/CVE-2025-46577.md): ZTE GoldenDB Database product has an SQL injection vulnerability (CVSS 6.5)
- [CVE-2025-46576](https://cve.now/CVE-2025-46576.md): ZTE GoldenDB Database product has a privilege escalation vulnerability (CVSS 5.4)
- [CVE-2025-46575](https://cve.now/CVE-2025-46575.md): ZTE GoldenDB Database product has an information disclosure vulnerability (CVSS 4.9)
- [CVE-2025-46574](https://cve.now/CVE-2025-46574.md): ZTE GoldenDB Database product has an input validation vulnerability (CVSS 4.1)
- [CVE-2025-26702](https://cve.now/CVE-2025-26702.md): Improper Input Validation vulnerability in ZTE GoldenDB allows Input Data Manipulation.This issue affects GoldenDB: from 6.1.03 through 6.1. (CVSS 4.9)
- [CVE-2025-26703](https://cve.now/CVE-2025-26703.md): Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1 (CVSS 4.3)
- [CVE-2025-26704](https://cve.now/CVE-2025-26704.md): Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1 (CVSS 6.4)
- [CVE-2025-26705](https://cve.now/CVE-2025-26705.md): Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1 (CVSS 5.3)
- [CVE-2025-26706](https://cve.now/CVE-2025-26706.md): Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1 (CVSS 5.4)
- [CVE-2025-26707](https://cve.now/CVE-2025-26707.md): Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1 (CVSS 5.3)
- [CVE-2025-26708](https://cve.now/CVE-2025-26708.md): ZTELink has a configuration defect vulnerability (CVSS 4.2)
- [CVE-2024-22063](https://cve.now/CVE-2024-22063.md): ZTE ZENIC ONE R58 product has a CSV injection vulnerability (CVSS 7.6)
- [CVE-2024-22067](https://cve.now/CVE-2024-22067.md): ZTE NH8091 product has an improper permission control vulnerability (CVSS 6.8)
- [CVE-2024-22066](https://cve.now/CVE-2024-22066.md): There is a privilege escalation vulnerability in ZTE ZXR10 ZSR V2 intelligent multi service router . (CVSS 7.5)
- [CVE-2024-22065](https://cve.now/CVE-2024-22065.md): ZTE MF258 Pro product has a OS Command injection vulnerability (CVSS 6.8)
- [CVE-2024-22068](https://cve.now/CVE-2024-22068.md): Weak Password Vulnerability in ZTE ZSR V2 Intelligent Multi Service Router (CVSS 6.0)
- [CVE-2022-39068](https://cve.now/CVE-2022-39068.md): Buffer Overflow Vulnerability in ZTE MF296R (CVSS 4.5)
- [CVE-2024-22069](https://cve.now/CVE-2024-22069.md): Permission and Access Control Vulnerability in ZXV10 XT802/ET301 (CVSS 7.1)
- [CVE-2024-22062](https://cve.now/CVE-2024-22062.md): Permissions and Access Control Vulnerability in ZTE ZXCLOUD IRAI (CVSS 6.3)
- [CVE-2023-25646](https://cve.now/CVE-2023-25646.md): Permission and Access Control Vulnerability in ZTE H388X (CVSS 7.1)
- [CVE-2024-22064](https://cve.now/CVE-2024-22064.md): Configuration error Vulnerability in ZTE ZXUN-ePDG (CVSS 8.3)
- [CVE-2023-41781](https://cve.now/CVE-2023-41781.md): XSS Vulnerability in ZTE MF258 Products (CVSS 5.7)
- [CVE-2023-41782](https://cve.now/CVE-2023-41782.md): DLL Hijacking Vulnerability in ZTE ZXCLOUD iRAI (CVSS 3.9)
- [CVE-2023-41784](https://cve.now/CVE-2023-41784.md): Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro (CVSS 6.6)
- [CVE-2023-41783](https://cve.now/CVE-2023-41783.md): Command Injection Vulnerability of ZTE's ZXCLOUD iRAI (CVSS 4.3)
- [CVE-2023-41776](https://cve.now/CVE-2023-41776.md): Local Privilege Escalation Vulnerability of ZTE's ZXCLOUD iRAI (CVSS 6.7)
- [CVE-2023-41780](https://cve.now/CVE-2023-41780.md): Unsafe DLL Loading Vulnerability in ZTE ZXCLOUD iRAI (CVSS 6.4)
- [CVE-2023-41779](https://cve.now/CVE-2023-41779.md): Illegal Memory Access Vulnerability of ZTE's ZXCLOUD iRAI (CVSS 4.4)
- [CVE-2023-25644](https://cve.now/CVE-2023-25644.md): Denial of Service Vulnerability in Some ZTE Mobile Internet Products (CVSS 6.5)
- [CVE-2023-25643](https://cve.now/CVE-2023-25643.md): Two Vulnerabilities in Some ZTE Mobile Internet Products (CVSS 8.4)
- [CVE-2023-25642](https://cve.now/CVE-2023-25642.md): Two Vulnerabilities in Some ZTE Mobile Internet Products (CVSS 5.9)
- [CVE-2023-25651](https://cve.now/CVE-2023-25651.md): SQL Injection Vulnerability in Some ZTE Mobile Internet Products (CVSS 4.3)
- [CVE-2023-25650](https://cve.now/CVE-2023-25650.md): Arbitrary File Download Vulnerability in ZTE ZXCLOUD iRAI (CVSS 6.5)
- [CVE-2023-25648](https://cve.now/CVE-2023-25648.md): Weak Folder Permission Vulnerability in ZTE ZXCLOUD iRAI (CVSS 6.5)
- [CVE-2023-25649](https://cve.now/CVE-2023-25649.md): OS Command Injection Vulnerability in a Mobile Internet Product of ZTE (CVSS 6.8)
- [CVE-2023-25647](https://cve.now/CVE-2023-25647.md): Permission and Access Control Vulnerability in Some ZTE Mobile Phones (CVSS 4.7)
- [CVE-2020-6870](https://cve.now/CVE-2020-6870.md): The version V12.17.20T115 of ZTE U31R20 product is impacted by a design error vulnerability. (no CVSS)
- [CVE-2020-6864](https://cve.now/CVE-2020-6864.md): ZTE E8820V3 router product is impacted by an information leak vulnerability. (no CVSS)
- [CVE-2020-6863](https://cve.now/CVE-2020-6863.md): ZTE E8820V3 router product is impacted by a permission and access control vulnerability. (no CVSS)
- [CVE-2020-6862](https://cve.now/CVE-2020-6862.md): V6.0.10P2T2 and V6.0.10P2T5 of F6x2W product are impacted by Information leak vulnerability. (no CVSS)
- [CVE-2019-3431](https://cve.now/CVE-2019-3431.md): All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have encryption problems vulnerability. (no CVSS)
- [CVE-2019-3430](https://cve.now/CVE-2019-3430.md): All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have an information disclosure vulnerability. (no CVSS)
- [CVE-2019-3429](https://cve.now/CVE-2019-3429.md): All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have a file reading vulnerability. (no CVSS)
- [CVE-2019-3428](https://cve.now/CVE-2019-3428.md): The version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a configuration error vulnerability. (no CVSS)
- [CVE-2019-3427](https://cve.now/CVE-2019-3427.md): The version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a code injection vulnerability. (no CVSS)
- [CVE-2019-3424](https://cve.now/CVE-2019-3424.md): authentication issues vulnerability, which exists in V2.1.14 and below versions of C520V21 smart camera devices. (no CVSS)
- [CVE-2019-3423](https://cve.now/CVE-2019-3423.md): permission and access control vulnerability, which exists in V2.1.14 and below versions of C520V21 smart camera devices. (no CVSS)
- [CVE-2019-3426](https://cve.now/CVE-2019-3426.md): The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by the input validation vulnerability. (no CVSS)
- [CVE-2019-3425](https://cve.now/CVE-2019-3425.md): The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by vulnerability of permission and access contr (no CVSS)
- [CVE-2019-3422](https://cve.now/CVE-2019-3422.md): The Sec Consult Security Lab reported an information disclosure vulnerability in MF910S product to ZTE PSIRT in October 2019. (no CVSS)
- [CVE-2019-3421](https://cve.now/CVE-2019-3421.md): The 7520V3V1.0.0B09P27 version, and all earlier versions of ZTE product ZX297520V3 are impacted by a Command Injection vulnerability. (no CVSS)
- [CVE-2019-3419](https://cve.now/CVE-2019-3419.md): A security vulnerability exists in a management port in the version of ZTE's ZXMP M721V3.10P01B10\_M2NCP. (no CVSS)
- [CVE-2019-3416](https://cve.now/CVE-2019-3416.md): All versions up to V81511329.1008 of ZTE ZXV10 B860A products are impacted by input validation vulnerability. (CVSS 8.1)
- [CVE-2019-3418](https://cve.now/CVE-2019-3418.md): All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by cross-site scripting vulnerability (XSS). (CVSS 5.7)
- [CVE-2019-3417](https://cve.now/CVE-2019-3417.md): All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by command injection vulnerability. (CVSS 8.1)
- [CVE-2019-3414](https://cve.now/CVE-2019-3414.md): All versions up to V1.19.20.02 of ZTE OTCP product are impacted by XSS vulnerability. (no CVSS)
- [CVE-2019-3415](https://cve.now/CVE-2019-3415.md): ZTE MW NR8000V2.4.4.03 and NR8000V2.4.4.04 are impacted by path traversal vulnerability. (no CVSS)
- [CVE-2019-3413](https://cve.now/CVE-2019-3413.md): All versions up to V20.18.40.R7.B1of ZTE NetNumen DAP product have an XSS vulnerability. (CVSS 5.4)
- [CVE-2019-3412](https://cve.now/CVE-2019-3412.md): All versions up to BD\_R218V2.4 of ZTE MF920 product are impacted by command execution vulnerability. (CVSS 9.8)
- [CVE-2019-3411](https://cve.now/CVE-2019-3411.md): All versions up to BD\_R218V2.4 of ZTE MF920 product are impacted by information leak vulnerability. (CVSS 8.1)
- [CVE-2019-3410](https://cve.now/CVE-2019-3410.md): All versions up to UKBB\_WF820+\_1.0.0B06 of ZTE WF820+ LTE Outdoor CPE product are impacted by Cross-Site Request Forgery vulnerability,which (CVSS 4.6)
- [CVE-2019-3409](https://cve.now/CVE-2019-3409.md): All versions up to UKBB\_WF820+\_1.0.0B06 of ZTE WF820+ LTE Outdoor CPE product are impacted by command injection vulnerability. (CVSS 9.0)
- [CVE-2018-7366](https://cve.now/CVE-2018-7366.md): ZTE ZXV10 B860AV2.1 product ChinaMobile branch with the ICNT versions up to V1.3.3, the BESTV versions up to V1.2.2, the WASU versions up to (CVSS 4.3)
- [CVE-2018-7365](https://cve.now/CVE-2018-7365.md): All versions up to ZXCLOUD iRAI V5.01.05 of the ZTE uSmartView product are impacted by untrusted search path vulnerability, which may allow (CVSS 5.1)
- [CVE-2018-7364](https://cve.now/CVE-2018-7364.md): All versions up to ZXINOS-RESV1.01.43 of the ZTE ZXIN10 product European region are impacted by improper access control vulnerability. (CVSS 8.3)
- [CVE-2018-7363](https://cve.now/CVE-2018-7363.md): All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper authorization vulnerability. (CVSS 4.3)
- [CVE-2018-7362](https://cve.now/CVE-2018-7362.md): All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper access control vulnerability, which may allows an unauthor (CVSS 7.5)
- [CVE-2018-7361](https://cve.now/CVE-2018-7361.md): All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by null pointer dereference vulnerability, which may allows an attacke (CVSS 6.5)
- [CVE-2018-7360](https://cve.now/CVE-2018-7360.md): All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by information exposure vulnerability, which may allow an unauthentica (CVSS 9.6)
- [CVE-2018-7359](https://cve.now/CVE-2018-7359.md): All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by heap-based buffer overflow vulnerability, which may allow an attack (CVSS 9.0)
- [CVE-2018-7358](https://cve.now/CVE-2018-7358.md): ZTE ZXHN H168N product with versions V2.2.0\_PK1.2T5, V2.2.0\_PK1.2T2, V2.2.0\_PK11T7 and V2.2.0\_PK11T have an improper change control vulnerab (CVSS 6.5)
- [CVE-2018-7357](https://cve.now/CVE-2018-7357.md): ZTE ZXHN H168N product with versions V2.2.0\_PK1.2T5, V2.2.0\_PK1.2T2, V2.2.0\_PK11T7 and V2.2.0\_PK11T have an improper access control vulnerab (CVSS 6.5)
- [CVE-2018-7356](https://cve.now/CVE-2018-7356.md): All versions up to V3.03.10.B23P2 of ZTE ZXR10 8905E product are impacted by TCP Initial Sequence Number (ISN) reuse vulnerability, which ca (CVSS 5.6)
- [CVE-2018-7355](https://cve.now/CVE-2018-7355.md): All versions up to V1.0.0B05 of ZTE MF65 and all versions up to V1.0.0B02 of ZTE MF65M1 are impacted by cross-site scripting vulnerability. (no CVSS)
- [CVE-2017-10937](https://cve.now/CVE-2017-10937.md): SQL injection vulnerability in all versions prior to V2.01.05.09 of the ZTE ZXIPTV-UCM product allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2017-10936](https://cve.now/CVE-2017-10936.md): SQL injection vulnerability in all versions prior to V4.01.01 of the ZTE ZXCDN-SNS product allows remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2017-10935](https://cve.now/CVE-2017-10935.md): All versions prior to ZSRV2 V3.00.40 of the ZTE ZXR10 1800-2S products allow remote authenticated users to bypass the original password auth (no CVSS)
- [CVE-2017-10934](https://cve.now/CVE-2017-10934.md): All versions prior to V5.09.02.02T4 of the ZTE ZXIPTV-EPG product use the Java RMI service in which the servers use the Apache Commons Colle (no CVSS)
- [CVE-2017-10933](https://cve.now/CVE-2017-10933.md): All versions prior to V2.06.00.00 of ZTE ZXDT22 SF01, an monitoring system of ZTE energy product, are impacted by directory traversal vulner (no CVSS)
- [CVE-2017-10932](https://cve.now/CVE-2017-10932.md): All versions prior to V12.17.20 of the ZTE Microwave NR8000 series products - NR8120, NR8120A, NR8120, NR8150, NR8250, NR8000 TR and NR8950 (no CVSS)
- [CVE-2017-10931](https://cve.now/CVE-2017-10931.md): The ZXR10 1800-2S before v3.00.40 incorrectly restricts the download of the file directory range for WEB users, resulting in the ability to (no CVSS)
- [CVE-2017-10930](https://cve.now/CVE-2017-10930.md): The ZXR10 1800-2S before v3.00.40 incorrectly restricts access to a resource from an unauthorized actor, resulting in ordinary users being a (no CVSS)
- [CVE-2017-3216](https://cve.now/CVE-2017-3216.md): WiMAX routers based on the MediaTek SDK (libmtk) that use a custom httpd plugin are vulnerable to an authentication bypass allowing a remote (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/zte
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.