cvelist/2019/3xxx/CVE-2019-3424.json

{
    "data_type": "CVE",
    "data_format": "MITRE",
    "data_version": "4.0",
    "CVE_data_meta": {
        "ID": "CVE-2019-3424",
        "ASSIGNER": "psirt@zte.com.cn",
        "STATE": "PUBLIC"
    },
    "affects": {
        "vendor": {
            "vendor_data": [
                {
                    "vendor_name": "ZTE Corporation",
                    "product": {
                        "product_data": [
                            {
                                "product_name": "C520V21",
                                "version": {
                                    "version_data": [
                                        {
                                            "version_value": "All versions up to V2.1.14"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                }
            ]
        }
    },
    "problemtype": {
        "problemtype_data": [
            {
                "description": [
                    {
                        "lang": "eng",
                        "value": "Authentication Issues"
                    }
                ]
            }
        ]
    },
    "references": {
        "reference_data": [
            {
                "refsource": "CONFIRM",
                "name": "http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011842",
                "url": "http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011842"
            }
        ]
    },
    "description": {
        "description_data": [
            {
                "lang": "eng",
                "value": "authentication issues vulnerability, which exists in V2.1.14 and below versions of C520V21 smart camera devices. An attacker can automatically obtain access to web services from the authorized browser of the same computer and perform operations."
            }
        ]
    }
}