CVE-2018-7361

Vulnerability

A null pointer dereference vulnerability exists in the appviahttp service of ZTE ZXHN F670 V1.0 devices running firmware versions up to V1.1.10P3T18. The flaw is triggered when the service processes specially crafted requests, leading to a crash. No authentication is required to reach the vulnerable code path [1].

Exploitation

An attacker must be on the same network segment (adjacent) as the targeted device to send network requests to the appviahttp service. The attack complexity is low, requires no privileges, and no user interaction. By sending a malicious request, the attacker causes the service to dereference a null pointer, resulting in a denial of service condition [1].

Impact

Successful exploitation causes the appviahttp service to crash, resulting in a denial of service. The impact is limited to availability; there is no impact on confidentiality or integrity. The CVSS v3.0 base score is 6.5 (Medium) with the vector AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H [1].

Mitigation

ZTE has released firmware version V1.1.10P3T22 to address the vulnerability in ZXHN F670 V1.0 devices. Users should upgrade to this fixed version or later. No workarounds are documented. Affected devices running versions prior to V1.1.10P3T18 should be updated immediately [1].