PT-2015-7819 · Zte · Zte Zxv10 W300+1

Publicado 2015-12-30 · Atualizado 2016-11-28 · CVE-2015-8703

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ZTE ZXHN H108N R1A versions before ZTE.bhs.ZXHNH108NR1A.k PE ZTE ZXV10 W300 versions before W300V1.0.0f ER1 PE

Description The issue allows remote authenticated users to bypass intended access restrictions and discover credentials and keys by reading the configuration file.

Recommendations For ZTE ZXHN H108N R1A versions before ZTE.bhs.ZXHNH108NR1A.k PE, update to ZTE.bhs.ZXHNH108NR1A.k PE or later. For ZTE ZXV10 W300 versions before W300V1.0.0f ER1 PE, update to W300V1.0.0f ER1 PE or later.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2015-8703

Produtos afetados

Zte Zxhn H108N R1A

Zte Zxv10 W300

Referências · 5

• 🔥 https://exploit-db.com/exploits/38773 · Exploit
• https://kb.cert.org/vuls/id/391604 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-8703 · Nota de Segurança
• http://securityfocus.com/bid/77421 · Nota
• https://kb.cert.org/vuls/id/BLUU-9ZDJWA · Nota