high7.5Public exploit code
CVE-2015-7248
ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote attackers to discover usernames and password hashes by reading the cgi-bin/webproc HTM…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ZTE ZXHN H108N R1A / ZXV10 W300 Routers - Multiple Vulnerabilities2015-11-20 · webapps · hardware
Impact
ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote attackers to discover usernames and password hashes by reading the cgi-bin/webproc HTML source code, a different vulnerability than CVE-2015-8703.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zte | Zxhn H108n R1a Firmware | through zte.bhs.zxhnh108nr1a.h_pe |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/77421
- https://www.exploit-db.com/exploits/38773/
- https://www.kb.cert.org/vuls/id/391604
- https://www.kb.cert.org/vuls/id/BLUU-9ZDJWA
- http://www.securityfocus.com/bid/77421
- https://www.exploit-db.com/exploits/38773/
- https://www.kb.cert.org/vuls/id/391604
- https://www.kb.cert.org/vuls/id/BLUU-9ZDJWA