What is CVE-2019-3424?

CVE-2019-3424 is a high-severity vulnerability in ZTE Corporation C520v21. CVSS score: 8.2/10. Published 2019-11-18.

How severe is CVE-2019-3424?

High severity. CVSS v3 base score is 8.2 out of 10.

Vulnerability in ZTE Corporation C520v21

CVE-2019-3424

authentication issues vulnerability, which exists in V2.1.14 and below versions of C520V21 smart camera devices. An attacker can automatically obtain access to web services from the authorized browser of the same computer and perform operations.

EPSS: 0.009 (56.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N.

Affected products

Zte Corporation C520v21 — versions All versions up to V2.1.14
Ztehome C520v21
Ztehome C520v21_firmware

References

psirt@zte.com.cn (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2019-3424?: CVE-2019-3424 is a high-severity vulnerability in ZTE Corporation C520v21. CVSS score: 8.2/10. Published 2019-11-18.
How severe is CVE-2019-3424?: High severity. CVSS v3 base score is 8.2 out of 10.