What is CVE-2019-3417?

CVE-2019-3417 is a high-severity vulnerability in ZTE Zxhn F670, classified under OS Command Injection. CVSS score: 8.8/10. Published 2019-08-15.

How severe is CVE-2019-3417?

High severity. CVSS v3 base score is 8.8 out of 10.

RCE in ZTE Zxhn F670

CVE-2019-3417

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by command injection vulnerability. Due to insufficient parameter validation check, an authorized user can exploit this vulnerability to take control of user router system.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.019 (77.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Zte Zxhn F670 — versions unspecified
Zte Zxhn_f670
Zte Zxhn_f670_firmware

Weakness classification (CWE)

CWE-78 — OS Command Injection

References

psirt@zte.com.cn (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2019-3417?: CVE-2019-3417 is a high-severity vulnerability in ZTE Zxhn F670, classified under OS Command Injection. CVSS score: 8.8/10. Published 2019-08-15.
How severe is CVE-2019-3417?: High severity. CVSS v3 base score is 8.8 out of 10.