Directory Traversal and Access Control Issue in C520V21 Smart Camera by ZTE
CVE-2019-3423

5.3MEDIUM

Key Information:

Vendor

Zte Corporation

Status
C520v21
Vendor
CVE Published:
18 November 2019

What is CVE-2019-3423?

The C520V21 smart camera series from ZTE is susceptible to a permission and access control vulnerability in versions V2.1.14 and earlier. An attacker can exploit this weakness by crafting a malicious URL, allowing them to traverse directories and gain unauthorized access to restricted files or resources, potentially compromising the integrity and confidentiality of the device.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

C520V21 All versions up to V2.1.14

References

http://support.zte.com.cn/support/news/LoopholeInfoDetail...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.