zxhn_h168a_firmware vulnerabilities
4 known vulnerabilities in zxhn_h168a_firmware from ZTE. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.1 High severity
zxhn_z500_firmware: Inclusion of Functionality from Untrusted Control Sphere
The HTTPD binary in multiple ZTE routers has a local file inclusion vulnerability in session_init function. The session -LUA- files are stored in the directory /var/lua_session, the function iterates on all files in this directory and executes them using the f
- 9.8 Critical severity
zxhn_z500_firmware: Stack-based Buffer Overflow
The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in check_data_integrity function. This function is responsible for validating the checksum of data in post request. The checksum is sent encrypted in the request, the func
- 9.8 Critical severity
zxhn_z500_firmware: Stack-based Buffer Overflow
The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in webPrivateDecrypt function. This function is responsible for decrypting RSA encrypted ciphertext, the encrypted data is supplied base64 encoded. The decoded ciphertext
- 8.1 High severity
zxhn_z500_firmware: Stack-based Buffer Overflow
The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in rsa_decrypt function. This function is an API wrapper for LUA to decrypt RSA encrypted ciphertext, the decrypted data is stored on the stack without checking its length