Null Pointer Dereference Vulnerability in ZTE ZXHN F670 Product
CVE-2018-7361

6.5MEDIUM

Key Information:

Vendor

Zte

Status
Zxhn F670
Vendor
CVE Published:
16 November 2018

What is CVE-2018-7361?

The ZTE ZXHN F670 product is susceptible to a null pointer dereference vulnerability that can be exploited via the appviahttp service. This flaw may allow attackers to intentionally trigger a denial of service condition, impacting the availability of the affected device. Users are advised to review their system configurations and consider applying any available updates to mitigate potential risks.

Affected Version(s)

ZXHN F670 <= unspecified

References

http://support.zte.com.cn/support/news/LoopholeInfoDetail...
x_refsource_CONFIRM

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.