CVE-2019-3410

State: Published
Severity: 4.6 Medium
Published: Jun 11, 2019
Updated: Aug 4, 2024
Reserved: Dec 31, 2018

Description

All versions up to UKBB_WF820+_1.0.0B06 of ZTE WF820+ LTE Outdoor CPE product are impacted by Cross-Site Request Forgery vulnerability,which stems from the fact that WEB applications do not adequately verify whether requests come from trusted users. An attacker can exploit this vulnerability to send unexpected requests to the server through the affected client.

Scores

CVSS	Score	Vector	Source
3.0	4.6 Medium	CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L	zte

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
ZTE WF820+ LTE Outdoor CPEZTE	UKBB_WF820+_1.0.0B06 and earlierAffected

References

http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010662

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.