What is CVE-2019-3416?

CVE-2019-3416 is a critical-severity vulnerability in ZTE Zxv10 B860a, classified under Improper Input Validation. CVSS score: 9.8/10. Published 2019-09-23.

How severe is CVE-2019-3416?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Improper input validation in ZTE Zxv10 B860a

CVE-2019-3416

All versions up to V81511329.1008 of ZTE ZXV10 B860A products are impacted by input validation vulnerability. Due to input validation, unauthorized users can take advantage of this vulnerability to control the user terminal system.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.011 (60.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Zte Zxv10 B860a — versions unspecified
Zte Zxv10_b860a
Zte Zxv10_b860a_firmware

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

psirt@zte.com.cn (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2019-3416?: CVE-2019-3416 is a critical-severity vulnerability in ZTE Zxv10 B860a, classified under Improper Input Validation. CVSS score: 9.8/10. Published 2019-09-23.
How severe is CVE-2019-3416?: Critical severity. CVSS v3 base score is 9.8 out of 10.