PT-2017-7169 · Zte · Zxv10 W300

Karn Ganeshen · Publicado 2017-08-24 · Atualizado 2017-08-29 · CVE-2015-7257

Positive Technologies (AI Summary)

CVSS v2.0

8.5

Alta

Vetor base

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ZTE ADSL ZXV10 W300 modems versions W300V2.1.0f ER7 PE O57 through W300V2.1.0h ER7 PE O57

Description The issue allows remote authenticated non-administrator users to change the admin password. This is achieved by intercepting an outgoing password change request and modifying the username parameter from support to admin.

Recommendations For versions W300V2.1.0f ER7 PE O57 through W300V2.1.0h ER7 PE O57, as a temporary workaround, consider restricting access to the password change functionality to prevent unauthorized admin password changes. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-640

Identificadores relacionados

CVE-2015-7257

Produtos afetados

Zxv10 W300

Referências · 5

• 🔥 https://exploit-db.com/exploits/38772 · Exploit
• http://packetstormsecurity.com/files/134493/ZTE-ADSL-ZXV10-W300-Authorization-Disclosure-Backdoor.html · Nota
• http://packetstormsecurity.com/files/134336/ZTE-ADSL-Authorization-Bypass-Information-Disclosure.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-7257 · Nota de Segurança
• http://seclists.org/fulldisclosure/2015/Nov/48 · Nota