What is CVE-2017-10930?

CVE-2017-10930 is a critical-severity vulnerability in Zte Zx10 1800-2s, classified under Files or Directories Accessible to External Parties. CVSS score: 9.8/10. Published 2017-09-19.

How severe is CVE-2017-10930?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Zte Zx10 1800-2s

CVE-2017-10930

The ZXR10 1800-2S before v3.00.40 incorrectly restricts access to a resource from an unauthorized actor, resulting in ordinary users being able to download configuration files to steal information like administrator accounts and passwords.

EPSS: 0.011 (60.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Zte Zx10 1800-2s — versions All versions prior to V3.00.40
Zte Zxr10_160
Zte Zxr10_160_firmware
Zte Zxr10_1800-2s
Zte Zxr10_1800-2s_firmware
Zte Zxr10_2800-4
Zte Zxr10_2800-4_firmware
Zte Zxr10_3800-8
Zte Zxr10_3800-8_firmware

Weakness classification (CWE)

CWE-552 — Files or Directories Accessible to External Parties

References

psirt@zte.com.cn (Permissions Required, x_refsource_MISC)

Frequently asked questions

What is CVE-2017-10930?: CVE-2017-10930 is a critical-severity vulnerability in Zte Zx10 1800-2s, classified under Files or Directories Accessible to External Parties. CVSS score: 9.8/10. Published 2017-09-19.
How severe is CVE-2017-10930?: Critical severity. CVSS v3 base score is 9.8 out of 10.