{"id":"CVE-2018-7356","aliases":["EUVD-2018-19088","GHSA-7j79-33fw-38v7"],"status":"published","title":"All versions up to V3.03.10.B23P2 of ZTE ZXR10 8905E product are impacted by TCP Initial Sequence...","description":"All versions up to V3.03.10.B23P2 of ZTE ZXR10 8905E product are impacted by TCP Initial Sequence Number (ISN) reuse vulnerability, which can generate easily predictable ISN, and allows remote attackers to spoof connections.","severity":{"version":"3.0","score":5.6,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00689,"percentile":0.53048,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-294"],"published":"2018-11-01T13:29:00.723Z","modified":"2026-06-17T02:03:03Z","products":[{"vendor":"zte","product":"zxr10 8905e"},{"vendor":"zte","product":"zxr10_8905e_firmware"}],"references":[{"url":"http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1009783","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-7356"},{"url":"https://github.com/advisories/GHSA-7j79-33fw-38v7"}],"sources":{"cve":[{"id":"CVE-2018-7356","description":"All versions up to V3.03.10.B23P2 of ZTE ZXR10 8905E product are impacted by TCP Initial Sequence Number (ISN) reuse vulnerability, which can generate easily predictable ISN, and allows remote attackers to spoof connections.","status":"published","published":"2018-11-01T14:00:00Z","modified":"2024-08-05T06:24:11.88Z","cvss":[{"version":"3.0","score":5.6,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:35:09.908186Z"}],"euvd":[{"id":"EUVD-2018-19088","description":"All versions up to V3.03.10.B23P2 of ZTE ZXR10 8905E product are impacted by TCP Initial Sequence Number (ISN) reuse vulnerability, which can generate easily predictable ISN, and allows remote attackers to spoof connections.","status":"published","published":"2018-11-01T14:00:00Z","modified":"2024-08-05T06:24:11Z","cvss":[{"version":"3.0","score":5.6,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-03T02:40:06.159235Z"}],"ghsa":[{"id":"GHSA-7j79-33fw-38v7","title":"All versions up to V3.03.10.B23P2 of ZTE ZXR10 8905E product are impacted by TCP Initial Sequence...","description":"All versions up to V3.03.10.B23P2 of ZTE ZXR10 8905E product are impacted by TCP Initial Sequence Number (ISN) reuse vulnerability, which can generate easily predictable ISN, and allows remote attackers to spoof connections.","status":"published","published":"2022-05-13T01:31:55Z","modified":"2023-02-01T05:08:09Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-294"],"updated_at":"2026-11-02T14:50:41.695645Z"}],"nvd":[{"id":"CVE-2018-7356","description":"All versions up to V3.03.10.B23P2 of ZTE ZXR10 8905E product are impacted by TCP Initial Sequence Number (ISN) reuse vulnerability, which can generate easily predictable ISN, and allows remote attackers to spoof connections.","status":"published","published":"2018-11-01T13:29:00.723Z","modified":"2026-06-17T02:03:03.677Z","cvss":[{"version":"3.0","score":5.6,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-294"],"updated_at":"2026-11-02T14:04:47.196456Z"}]}}