CVE-2015-7249 | BDVDB-2026-73512 Detail

Description#

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote authenticated users to bypass intended access restrictions via a modified request, as demonstrated by leveraging the support account to change a password via a cgi-bin/webproc accountpsd action.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/77421
https://www.kb.cert.org/vuls/id/BLUU-9ZDJWA
https://www.kb.cert.org/vuls/id/391604
https://www.exploit-db.com/exploits/38773/

Exploit#

https://www.exploit-db.com/exploits/38773/

History#

Version 12015-12-30Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.