CVE-2019-3420 Information disclosure in ZXHN H108N
Attackers can exploit an information leak in ZTE ZXHN H108N routers to obtain sensitive data and perform unauthorized operations.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-3420?
CVE-2019-3420 is a medium-severity vulnerability in ZXHN H108N, published on 13 Nov 2019. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
All versions up to V2.5.0_EG1T5_TED of ZTE ZXHN H108N product are impacted by an information leak vulnerability. An attacker could exploit the vulnerability to obtain sensitive information and perform unauthorized operations.
Which versions are affected by CVE-2019-3420?
It affects 1 product.
Products include Zte Zxhn H108n Firmware.
How do I fix CVE-2019-3420?
No fix has been published for CVE-2019-3420 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-3420 being exploited?
There is no known exploitation of CVE-2019-3420 in the wild and no public exploit code.
Other vulnerabilities in ZXHN H108N
Sources
Also known as GHSA-xvww-87m7-74xx.