File and Path Handling

Every one of the 13 is a mark on the map. Named now: 1 to 13, most at risk first.

1. Absolute path traversal vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attackers to read arbitrary files via a full…CVE-2015-7250Zte · 16% likely

   CWE-22

2. All versions prior to V2.06.00.00 of ZTE ZXDT22 SF01, an monitoring system of ZTE energy product, are impacted by directory traversal vulnerability that allows remote attackers to…CVE-2017-10933ZTE · 2.1% likely

   CWE-22

3. There is a directory traversal vulnerability in some home gateway products of ZTE. Due to the lack of verification of user modified destination path, an attacker with specific per…CVE-2022-23135Zte · 1.4% likely

   CWE-22

4. The ZXR10 1800-2S before v3.00.40 incorrectly restricts the download of the file directory range for WEB users, resulting in the ability to download any files and cause informatio…CVE-2017-10931ZTE · 1.3% likely

   CWE-22

5. permission and access control vulnerability, which exists in V2.1.14 and below versions of C520V21 smart camera devices. An attacker can construct a URL for directory traversal an…CVE-2019-3423ZTE Corporation · 1.3% likely

   CWE-22

6. The ZXR10 1800-2S before v3.00.40 incorrectly restricts access to a resource from an unauthorized actor, resulting in ordinary users being able to download configuration files to…CVE-2017-10930ZTE · 1.1% likely

   CWE-552

7. ZTE MW NR8000V2.4.4.03 and NR8000V2.4.4.04 are impacted by path traversal vulnerability. Due to path traversal,users can download any files.CVE-2019-3415ZTE · 0.9% likely

   CWE-22

8. All versions up to ZXCLOUD iRAI V5.01.05 of the ZTE uSmartView product are impacted by untrusted search path vulnerability, which may allow an unauthorized user to perform unautho…CVE-2018-7365ZTE · CVSS 5.1 · 0.7% likely

   CWE-426

9. There is an information leak vulnerability in the digital media player (DMS) of ZTE's residential gateway product. The attacker could insert the USB disk with the symbolic link in…CVE-2021-21740Zte · 0.4% likely

   CWE-59

10. Unsafe DLL Loading Vulnerability in ZTE ZXCLOUD iRAICVE-2023-41780ZTE · CVSS 6.4 · 0.2% likely

    CWE-22

11. Path Traversal Vulnerability in ZTE Blade A75 5GCVE-2026-40000ZTE · CVSS 1.8 · 0.2% likely

    CWE-22

12. DLL Hijacking Vulnerability in ZTE Cloud PC Client uSmartviewCVE-2026-44406ZTE · CVSS 5.7 · 0.2% likely

    CWE-427

13. openssl.cnf Privilege Escalation Vulnerability in ZTE Cloud PC Client uSmartviewCVE-2026-40004ZTE · CVSS 5.5 · 0.1% likely

    CWE-427

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.