CVE-2019-3416 Other in ZXV10 B860A
Unauthorized users can control the user terminal system due to an input validation vulnerability in ZTE ZXV10 B860A devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-3416?
CVE-2019-3416 is a high-severity vulnerability in ZTE ZXV10 B860A, published on 23 Sep 2019. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
All versions up to V81511329.1008 of ZTE ZXV10 B860A products are impacted by input validation vulnerability. Due to input validation, unauthorized users can take advantage of this vulnerability to control the user terminal system.
Weakness: CWE-20
Which versions are affected by CVE-2019-3416?
It affects 1 product.
Products include Zte Zxv10 B860a Firmware.
How do I fix CVE-2019-3416?
No fix has been published for CVE-2019-3416 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-3416 being exploited?
There is no known exploitation of CVE-2019-3416 in the wild and no public exploit code.
Other vulnerabilities in ZTE ZXV10 B860A
Sources
Also known as GHSA-4j3m-7845-m464.