CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2017-10931
High (7.5) in zte. EPSS 1.3% chance of exploitation in the next 30 days.
The ZXR10 1800-2S before v3.00.40 incorrectly restricts the download of the file directory range for WEB users, resulting in the ability to download any files and cause information leaks such as system configuration.
Severity
- EPSS
- 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
- CWE
- CWE-22
- Published
- Modified
- Record from
- the NVD, synced
Affected
- zte:zxr10_160_firmware
- zte:zxr10_1800-2s_firmware
- zte:zxr10_2800-4_firmware
- zte:zxr10_3800-8_firmware