Critical severity9.8NVD Advisory· Published Dec 7, 2018· Updated Jun 17, 2026

CVE-2018-7364

Description

All versions up to ZXINOS-RESV1.01.43 of the ZTE ZXIN10 product European region are impacted by improper access control vulnerability. Due to improper access control to devcomm process, an unauthorized remote attacker can exploit this vulnerability to execute arbitrary code with root privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zte/ZXIN102 versions
cpe:2.3:a:zte:zxin10:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:zte:zxin10:*:*:*:*:*:*:*:*range: <resv1.01.44
- (no CPE)range: <=ZXINOS-RESV1.01.43
ZTE/ZXIN10-European regionv5
Range: unspecified

Patches

Vulnerability mechanics

References

github.com/orangecertcc/security-research/security/advisories/GHSA-34f2-7h57-rg7pnvdExploitThird Party Advisory
support.zte.com.cn/support/news/LoopholeInfoDetail.aspxnvdVendor Advisory
support.zte.com.cn/support/news/LoopholeInfoDetail.aspxnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.008
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000