Medium severity · published Dec 23, 2019
CVE-2019-3430
All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have an information disclosure vulnerability
4.9
CVSS
0.9%
EPSS
No
On KEV
Description
All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have an information disclosure vulnerability. Attackers could use this vulnerability to collect data information and damage the system.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 59% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ZG
Zxcloud Goldendata Vap · Zte
through zxivs-vap-portal-xzgav4.01.01.02 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-3430
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-3430
Vendor Advisory
http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1012023
More from Zxcloud Goldendata Vap
9.8
CVE-2019-3431
All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have encryption problems vulnerability
5.3
CVE-2019-3429
All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have a file reading vulnerability