7.1
CVE-2026-34472
- EPSS 0.15%
- Veröffentlicht 30.03.2026 00:00:00
- Zuletzt bearbeitet 08.04.2026 16:05:42
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginUnauthenticated credential disclosure in the wizard interface in ZTE ZXHN H188A V6.0.10P2_TE and V6.0.10P3N3_TE allows unauthenticated attackers on the local network to retrieve sensitive credentials from the router's web management interface, including the default administrator password, WLAN PSK, and PPPoE credentials. In some observed cases, configuration changes may also be performed without authentication.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zte ≫ Zxhn H188a Firmware Version6.0.10p2_te
Zte ≫ Zxhn H188a Firmware Version6.0.10p3n3_te
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.15% | 0.353 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 7.1 | 2.8 | 4.2 |
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CWE-306 Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.