PT-2014-4623 · Zte · Zte F460+1

Publicado 2014-03-11 · Atualizado 2014-03-11 · CVE-2014-2321

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ZTE F460 and F660 cable modems (affected versions not specified)

Description The issue allows remote attackers to obtain administrative access. This can be achieved by sending sendcmd requests, for example, using "set TelnetCfg" commands to enable a TELNET service with specified credentials.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-2321

Produtos afetados

Zte F460

Zte F660

Referências · 4

• 🔥 https://community.rapid7.com/community/infosec/blog/2014/03/03/disclosure-r7-2013-18-zte-f460-and-zte-f660-webshellcmdgch-backdoor · Exploit
• http://myxzy.com/post-411.html · Nota
• http://kb.cert.org/vuls/id/600724 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-2321 · Nota de Segurança