high7.5Public exploit code
CVE-2015-7250
Absolute path traversal vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attackers to read arbitra…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ZTE ZXHN H108N R1A / ZXV10 W300 Routers - Multiple Vulnerabilities2015-11-20 · webapps · hardware
Impact
Absolute path traversal vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attackers to read arbitrary files via a full pathname in the getpage parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zte | Zxhn H108n R1a Firmware | through zte.bhs.zxhnh108nr1a.h_pe |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/77421
- https://www.exploit-db.com/exploits/38773/
- https://www.kb.cert.org/vuls/id/391604
- https://www.kb.cert.org/vuls/id/BLUU-9ZDJWA
- http://www.securityfocus.com/bid/77421
- https://www.exploit-db.com/exploits/38773/
- https://www.kb.cert.org/vuls/id/391604
- https://www.kb.cert.org/vuls/id/BLUU-9ZDJWA