CVE Catalog

CVE-2017-10931

High
Published: Translated: NVD NIST

Summary

The ZXR10 1800-2S before v3.00.40 incorrectly restricts the download of the file directory range for WEB users, resulting in the ability to download any files and cause information leaks such as system configuration.

Risk Assessment

The organization may be exposed to leaks of sensitive information, which could lead to security breaches and loss of user trust.

Recommendation

It is recommended to update the device to version 3.00.40 or later to fix this vulnerability and secure file access.

Other vulnerabilities in ZXR10 1800-2S

Original NVD description (English source)

The ZXR10 1800-2S before v3.00.40 incorrectly restricts the download of the file directory range for WEB users, resulting in the ability to download any files and cause information leaks such as system configuration.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS