PT-2014-4623 · Zte · Zte F460+1

Published 2014-03-11 · Updated 2014-03-11 · CVE-2014-2321

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ZTE F460 and F660 cable modems (affected versions not specified)

Description The issue allows remote attackers to obtain administrative access. This can be achieved by sending sendcmd requests, for example, using "set TelnetCfg" commands to enable a TELNET service with specified credentials.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2014-2321

Affected Products

Zte F460

Zte F660

References · 4

• 🔥 https://community.rapid7.com/community/infosec/blog/2014/03/03/disclosure-r7-2013-18-zte-f460-and-zte-f660-webshellcmdgch-backdoor · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-2321 · Security Note
• http://myxzy.com/post-411.html · Note
• http://kb.cert.org/vuls/id/600724 · Note