description: ZTE ZXV10 B860AV2.1 product ChinaMobile branch with the ICNT versions up to V1.3.3, the BESTV versions up to V1.2.2, the WASU versions up to V1.1.7 and the MGTV versions up to V1.4.6 have an authentication bypass vulnerability, which may allows an unauthorized user to perform unauthorized operations.
problem types: Improper Access Control
affected:
{
product: ZXV10 B860AV2.1_ChinaMobile
vendor: ZTE
versions:
lessThanOrEqual: ICNT_V1.3.3, status: affected, version: unspecified, versionType: custom
lessThanOrEqual: BESTV_V1.2.2, status: affected, version: unspecified, versionType: custom
lessThanOrEqual: WASU_V1.1.7, status: affected, version: unspecified, versionType: custom
lessThanOrEqual: MGTV_V1.4.6, status: affected, version: unspecified, versionType: custom
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: PHYSICAL
availabilityImpact: LOW
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
version: 3.0
]