What is CVE-2018-7358?

CVE-2018-7358 is a medium-severity vulnerability in ZTE Zxhn H168n, classified under Improper Authentication. CVSS score: 6.5/10. Published 2018-11-14.

How severe is CVE-2018-7358?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Auth bypass in ZTE Zxhn H168n

CVE-2018-7358

ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper change control vulnerability, which may allow an unauthorized user to perform unauthorized operations.

Vulnerability class: Broken Authentication

Published 2018-11-14 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

EPSS exploit prediction

EPSS: 0.896 (99.8th percentile), scored 2026-10-28.

High probability of exploitation in the next 30 days — patch promptly. 100th percentile — 99.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.896 · newest: 0.896 · change: 0.000

Affected products

ZTE Zxhn H168n — versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T
ZTE Zxhn H168n
ZTE Zxhn H168n Firmware — versions 2.2.0_pk1.2t2, 2.2.0_pk1.2t5, 2.2.0_pk11t

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

www.securityfocus.com/bid/105963 (VDB Entry, Third Party Advisory, vdb-entry)
www.exploit-db.com/exploits/45972/ (Exploit, VDB Entry, Third Party Advisory, exploit)
support.zte.com.cn/support/news/LoopholeInfoDetail.aspx (Vendor Advisory)

Frequently asked questions

What is CVE-2018-7358?: CVE-2018-7358 is a medium-severity vulnerability in ZTE Zxhn H168n, classified under Improper Authentication. CVSS score: 6.5/10. Published 2018-11-14.
How severe is CVE-2018-7358?: Medium severity. CVSS v3 base score is 6.5 out of 10.