Lucene search

K
cve[email protected]CVE-2014-2321
HistoryOct 03, 2022 - 4:20 p.m.

CVE-2014-2321

2022-10-0316:20:49
CWE-264
web.nvd.nist.gov
133
In Wild
zte
f460
f660
cable modems
vulnerability
remote access
administrative access

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.956 High

EPSS

Percentile

99.4%

web_shell_cmd.gch on ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests, as demonstrated by using β€œset TelnetCfg” commands to enable a TELNET service with specified credentials.

Affected configurations

NVD
Node
ztef460Match-
OR
ztef660Match-
CPENameOperatorVersion
zte:f460zte f460eq-
zte:f660zte f660eq-

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.956 High

EPSS

Percentile

99.4%