CVSS 3.0
7.5 highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2015-7255
High (7.5) in zte. EPSS 2.0% chance of exploitation in the next 30 days.
ZTE OX-330P, ZXHN H108N, W300V1.0.0S_ZRD_TR1_D68, HG110, GAN9.8T101A-B, MF28G, ZXHN H108N use non-unique X.509 certificates and SSH host keys, which might allow remote attackers to obtain credentials or other sensitive information via a man-in-the-middle attack, passive decryption attack, or impersonating a legitimate device.
Severity
- EPSS
- 2.0% chance of exploitation in the next 30 days; higher than 80% of CVEs (scores of 2026-10-31)
- CWE
- CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- zte:gan9.8t101a-b_firmware
- zte:hg110_firmware
- zte:mf28g_firmware
- zte:ox-330p_firmware
- zte:w300v1.0.0s_zrd_tr1_d68_firmware
- zte:zxhn_h108n_firmware