CVE-2019-3422 - CVE House
Back to Database
Status published Medium CVE-2019-3422

The Sec Consult Security Lab reported an information disclosure vulnerability...

Vulnerability Description

The Sec Consult Security Lab reported an information disclosure vulnerability in MF910S product to ZTE PSIRT in October 2019. Through the analysis of related product team, the information disclosure vulnerability is confirmed. The MF910S product's one-click upgrade tool can obtain the Telnet remote login password in the reverse way. If Telnet is opened, the attacker can remotely log in to the device through the cracked password, resulting in information leakage. The MF910S was end of service on October 23, 2019, ZTE recommends users to choose new products for the purpose of better security.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-3422

Credits & Attribution

No credits recorded in the NVD database.

References

More from ZTE

View All →
CVE-2025-66315
ZTE MF258K Pro Version Server has a Configuration Defect Vulnerability
Medium 4.3
CVE-2025-66314
Improper Privilege Management vulnerability in ZTE ElasticNet UME R32 on...
High 7.5
CVE-2025-46583
DOS Vulnerability in ZTE MC889A Pro product
Medium 5.3
CVE-2025-46582
Private Key Disclosure Vulnerability in ZTE ZXMP M721 Product
High 7.7
CVE-2025-46581
ZTE ZXCDN product has a Struts RCE Vulnerability
Critical 9.8

Affected Vendor

Affected Software

MF910S
Vulnerable Versions:
DL_MF910S_CN_EUV1.00.01.exe

Timeline

Official Publish: November 7th, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.