ZTE ZXHN H168N CVE-2018-7357 Authorization Bypass Vulnerability

Bugtraq ID:	105983
Class:	Access Validation Error
CVE:	CVE-2018-7357
Remote:	Yes
Local:	No
Published:	Sep 17 2018 12:00AM
Updated:	Sep 17 2018 12:00AM
Credit:	Usman Saeed
Vulnerable:	ZTE ZXHN H168N 2.2.0_PK11T7 ZTE ZXHN H168N 2.2.0_PK11T ZTE ZXHN H168N 2.2.0_PK1.2T5 ZTE ZXHN H168N 2.2.0_PK1.2T2
Not Vulnerable:	ZTE ZXHN H168N 2.2.0_PK1.2T6

ZTE ZXHN H168N CVE-2018-7357 Authorization Bypass Vulnerability

ZTE ZXHN H168N is prone to an authorization-bypass vulnerability.

Attackers can exploit this issue to gain unauthorized access and perform unauthorized actions; this may aid in launching further attacks.

ZTE ZXHN H168N versions 2.2.0_PK1.2T5, 2.2.0_PK1.2T2, 2.2.0_PK11T7 and 2.2.0_PK11T are vulnerable.

ZTE ZXHN H168N CVE-2018-7357 Authorization Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

ZTE ZXHN H168N CVE-2018-7357 Authorization Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

ZTE ZXHN H168N CVE-2018-7357 Authorization Bypass Vulnerability

References:

• ZTE Home Page (ZTE)
  
• Improper Authorization Vulnerabilities in ZTE ZXHN H168N Product (ZTE)