Lucene search
HistoryNov 20, 2014 - 5:50 p.m.
CVE-2014-8493
cve-2014-8493
zte
zxhn h108l
firmware
cwmp
configuration
modification
remote attackers
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.8 Medium
AI Score
Confidence
Low
0.042 Low
EPSS
Percentile
92.2%
ZTE ZXHN H108L with firmware 4.0.0d_ZRQ_GR4 allows remote attackers to modify the CWMP configuration via a crafted request to Forms/access_cwmp_1.
Affected configurations
Node
ztezxhn_h108l_firmwareMatch4.0.0d_zrq_gr4
ztezxhn_h108lMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| zte:zxhn_h108l_firmware | zte zxhn h108l firmware | eq | 4.0.0d_zrq_gr4 |
Related
exploitpack
exploitpack
ZTE ZXHN H108L - Authentication Bypass (1)
2014-11-17 00:00:00
cvelist
cvelist
CVE-2014-8493
2014-11-20 17:00:00
nvd
nvd
CVE-2014-8493
2014-11-20 17:50:01
prion
prion
Design/Logic Flaw
2014-11-20 17:50:00
exploitdb
exploitdb
ZTE ZXHN H108L - Authentication Bypass (1)
2014-11-17 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.8 Medium
AI Score
Confidence
Low
0.042 Low
EPSS
Percentile
92.2%
Related for CVE-2014-8493