medium4.9Public exploit code
CVE-2015-7249
ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote authenticated users to bypass intended access restrictions via a modified request, as …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ZTE ZXHN H108N R1A / ZXV10 W300 Routers - Multiple Vulnerabilities2015-11-20 · webapps · hardware
Impact
ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote authenticated users to bypass intended access restrictions via a modified request, as demonstrated by leveraging the support account to change a password via a cgi-bin/webproc accountpsd action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zte | Zxhn H108n R1a Firmware | through zte.bhs.zxhnh108nr1a.h_pe |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/77421
- https://www.exploit-db.com/exploits/38773/
- https://www.kb.cert.org/vuls/id/391604
- https://www.kb.cert.org/vuls/id/BLUU-9ZDJWA
- http://www.securityfocus.com/bid/77421
- https://www.exploit-db.com/exploits/38773/
- https://www.kb.cert.org/vuls/id/391604
- https://www.kb.cert.org/vuls/id/BLUU-9ZDJWA