Back to search
CVE-2015-7249
Published: Dec 30, 2015
Modified: Aug 6, 2024
PUBLISHED
Description
ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote authenticated users to bypass intended access restrictions via a modified request, as demonstrated by leveraging the support account to change a password via a cgi-bin/webproc accountpsd action.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
77421
vdb-entry
x_refsource_BID
https://www.kb.cert.org/vuls/id/BLUU-9ZDJWA
x_refsource_CONFIRM
VU#391604
third-party-advisory
x_refsource_CERT-VN
38773
exploit
x_refsource_EXPLOIT-DB
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now