What is CVE-2018-7365?

CVE-2018-7365 is a medium-severity vulnerability in Zte Usmartview, classified under Untrusted Search Path. CVSS score: 5.1/10. Published 2018-12-20.

How severe is CVE-2018-7365?

Medium severity. CVSS v3 base score is 5.1 out of 10.

Vulnerability in Zte Usmartview

CVE-2018-7365

All versions up to ZXCLOUD iRAI V5.01.05 of the ZTE uSmartView product are impacted by untrusted search path vulnerability, which may allow an unauthorized user to perform unauthorized operations.

EPSS: 0.007 (48.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.1 (Medium). Vector: CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L.

Affected products

Zte Usmartview — versions unspecified
Zte Zxcloud_irai

Weakness classification (CWE)

CWE-426 — Untrusted Search Path

References

psirt@zte.com.cn (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2018-7365?: CVE-2018-7365 is a medium-severity vulnerability in Zte Usmartview, classified under Untrusted Search Path. CVSS score: 5.1/10. Published 2018-12-20.
How severe is CVE-2018-7365?: Medium severity. CVSS v3 base score is 5.1 out of 10.