CVE-2014-8493 : ZTE ZXHN H108L with firmware 4.0.0d_ZRQ_GR4 allows remote attackers to modify th

ZTE ZXHN H108L with firmware 4.0.0d_ZRQ_GR4 allows remote attackers to modify the CWMP configuration via a crafted request to Forms/access_cwmp_1.

Published 2014-11-20 17:50:02

Updated 2017-09-08 01:29:24

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2014-8493

ZTE » Zxhn H108l Firmware » Version: 4.0.0d Zrq Gr4
cpe:2.3:o:zte:zxhn_h108l_firmware:4.0.0d_zrq_gr4:*:*:*:*:*:*:*
Matching versions
When used together with: ZTE » Zxhn H108l » Version: N/A

EPSS FAQ

3.43%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 92 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:P/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None

http://seclists.org/fulldisclosure/2014/Nov/46

Full Disclosure: CVE-2014-8493 - ZTE ZXHN H108L Authentication Bypass
Exploit
http://www.exploit-db.com/exploits/35272

ZTE ZXHN H108L - Authentication Bypass (1) - Hardware webapps Exploit
Exploit
http://www.exploit-db.com/exploits/35276

ZTE ZXHN H108L - Authentication Bypass (2) - Hardware webapps Exploit
Exploit
http://packetstormsecurity.com/files/129139/ZTE-ZXHN-H108L-Access-Bypass.html

ZTE ZXHN H108L Access Bypass ≈ Packet Storm
Exploit
https://projectzero.gr/en/2014/11/zte-zxhn-h108l-authentication-bypass/

Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/98733

ZTE ZXHN H108L security bypass CVE-2014-8493 Vulnerability Report

Jump to