CVE-2018-7356 Vulnerability Details

  /     /     /  

CVE-2018-7356 Metadata Quick Info

CVE Published: 01/11/2018 | CVE Updated: 05/08/2024 | CVE Year: 2018
Source: zte | Vendor: ZTE | Product: ZXR10 8905E
Status : PUBLISHED

---

CVE-2018-7356 Description

All versions up to V3.03.10.B23P2 of ZTE ZXR10 8905E product are impacted by TCP Initial Sequence Number (ISN) reuse vulnerability, which can generate easily predictable ISN, and allows remote attackers to spoof connections.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: TCP Initial Sequence Number (ISN) Reuse
Source: ZTE

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).