What is CVE-2019-3413?

CVE-2019-3413 is a medium-severity vulnerability in ZTE Netnumen Dap, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2019-06-11.

How severe is CVE-2019-3413?

Medium severity. CVSS v3 base score is 5.4 out of 10.

XSS in ZTE Netnumen Dap

CVE-2019-3413

All versions up to V20.18.40.R7.B1of ZTE NetNumen DAP product have an XSS vulnerability. Due to the lack of correct validation of client data in WEB applications, which results in users being hijacked.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.006 (46.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N.

Affected products

Zte Netnumen Dap — versions unspecified
Zte Netnumen_dap
Zte Netnumen_dap_firmware

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

psirt@zte.com.cn (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2019-3413?: CVE-2019-3413 is a medium-severity vulnerability in ZTE Netnumen Dap, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2019-06-11.
How severe is CVE-2019-3413?: Medium severity. CVSS v3 base score is 5.4 out of 10.