CVE-2019-3425
The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by vulnerability of permission and access control. An attacker could exploit this vulnerability to directly reset or change passwords of other accounts.
Date published : 2019-11-08
http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011683
