PT-2015-7491 · Zte · Zte Zxhn H108N R1A

Karn Ganeshen · Publicado 2015-12-30 · Atualizado 2017-09-13 · CVE-2015-7248

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k PE

Description The issue allows remote attackers to discover usernames and password hashes by reading the cgi-bin/webproc HTML source code.

Recommendations For ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k PE, update to ZTE.bhs.ZXHNH108NR1A.k PE or later to resolve the issue.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2015-7248

Produtos afetados

Zte Zxhn H108N R1A

Referências · 5

• 🔥 https://exploit-db.com/exploits/38773 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-7248 · Nota de Segurança
• https://kb.cert.org/vuls/id/391604 · Nota
• http://securityfocus.com/bid/77421 · Nota
• https://kb.cert.org/vuls/id/BLUU-9ZDJWA · Nota