ZTE Cable Modem Web Shell
| Reporter | Title | Published | Views | Family All 16 |
|---|---|---|---|---|
 | CVE-2014-2321 | 11 Mar 201400:00 | – | attackerkb |
 | CVE-2014-2321 | 24 Oct 202400:00 | – | circl |
 | ZTE F460/F660 Backdoor Unauthorized Access (CVE-2014-2321) | 17 Apr 201600:00 | – | checkpoint_advisories |
 | CVE-2014-2321 | 11 Mar 201410:00 | – | cve |
 | CVE-2014-2321 | 11 Mar 201410:00 | – | cvelist |
 | Windows-ZTE-Loader | 4 Sep 202620:29 | – | kitploit |
 | How to proactively defend against Mozi IoT botnet | 19 Aug 202118:00 | – | mmpc |
 | How to proactively defend against Mozi IoT botnet | 19 Aug 202118:00 | – | mssecure |
 | Event tracking: ZTE router SOHO Router）Backdoor has been clear-vulnerability warning-the black bar safety net | 14 Apr 201500:00 | – | myhack58 |
 | CVE-2014-2321 | 11 Mar 201413:01 | – | nvd |
10
id: CVE-2014-2321
info:
name: ZTE Cable Modem Web Shell
author: geeknik
severity: critical
description: |
ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests to web_shell_cmd.gch, as demonstrated by using "set TelnetCfg" commands to enable a TELNET service with specified credentials.
impact: |
Remote code execution
remediation: |
Apply the latest firmware update provided by ZTE to fix the vulnerability
reference:
- https://yosmelvin.wordpress.com/2017/09/21/f660-modem-hack/
- https://jalalsela.com/zxhn-h108n-router-web-shell-secrets/
- https://nvd.nist.gov/vuln/detail/CVE-2014-2321
- http://www.kb.cert.org/vuls/id/600724
- http://www.myxzy.com/post-411.html
classification:
cvss-metrics: CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:C
cvss-score: 10
cve-id: CVE-2014-2321
cwe-id: CWE-264
epss-score: 0.59259
epss-percentile: 0.99051
cpe: cpe:2.3:h:zte:f460:-:*:*:*:*:*:*:*
metadata:
max-request: 1
vendor: zte
product: f460
shodan-query: cpe:"cpe:2.3:h:zte:f460"
tags: cve2014,cve,iot,zte,vkev,vuln
http:
- method: GET
path:
- "{{BaseURL}}/web_shell_cmd.gch"
matchers-condition: and
matchers:
- type: word
part: body
words:
- "please input shell command"
- "ZTE Corporation. All rights reserved"
condition: and
- type: status
status:
- 200
# digest: 4a0a00473045022036eec1a357b563280c6f7c8ac4af90c7b9f9dfce75750d830f970783572df6a7022100a7bb939a634510989e4d8e4d185836fcd04d2258a6a703399264e44cdd50d711:922c64590222798bb761d5b6d8e72950Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
04 Feb 2026 07:00Current
7.2High risk
Vulners AI Score7.2
CVSS 210
EPSS0.59259