ZTE F460 & F660 Backdoor RCE

Exploits ZTE F460 and F660 backdoor vulnerability that allows executing commands on operating system level. !/usr/bin/env python3 -- coding: utf-8 -- """ZTE F460 & F660 Backdoor RCE""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.exploit.handler...

ZTE F460/F660 - web_shell_cmd.gch RCE (CVE-2014-2321)

Exploits CVE-2014-2321 by POSTing Cmd= to /webshellcmd.gch. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """ZTE F460/F660 webshellcmd.gch RCE CVE-2014-2321 — opens execute session.""" from urllib.parse import quote from kittysploit import from...

ZTE Cable Modem Web Shell Detection

ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests to webshellcmd.gch, as demonstrated by using "set TelnetCfg" commands to enable a TELNET service with specified credentials. !/usr/bin/env python3 -- coding: utf-8 -- """ZTE F460 and F660...

VulnCheck KEV: CVE-2014-2321

webshellcmd.gch on ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests, as demonstrated by using "set TelnetCfg" commands to enable a TELNET service with specified credentials...

ZTE_F460 /manager_dev_config_t.gch 信息泄漏漏洞

No description provided by source...

ZTE F460/F660 Backdoor Unauthorized Access Vulnerability (Mar 2014) - Active Check

ZTE F460/F660 cable modem devices are prone to an unauthorized access vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Design/Logic Flaw

webshellcmd.gch on ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests, as demonstrated by using "set TelnetCfg" commands to enable a TELNET service with specified credentials...

CVE-2014-2321

webshellcmd.gch on ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests, as demonstrated by using “set TelnetCfg” commands to enable a TELNET service with specified credentials. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker...

PT-2014-4623

Name of the Vulnerable Software and Affected Versions ZTE F460 and F660 cable modems affected versions not specified Description The issue allows remote attackers to obtain administrative access. This can be achieved by sending sendcmd requests, for example, using "set TelnetCfg" commands to enab...

CVE-2014-2321: Undefined Security Weakness

webshellcmd.gch on ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests, as demonstrated by using "set TelnetCfg" commands to enable a TELNET service with specified credentials...

ZTE F460/F660后门未授权访问漏洞

BUGTRAQ ID: 65962 ZTE F460/F660是有线调制解调器产品。 ZTE F460/F660存在未经身份验证的后门。webshellcmd.gch脚本接受未经身份验证的命令。该脚本有时可以从WAN接口访问，攻击者在某些情况下可利用该后门执行任意管理员命令。 0 ZTE F460 ZTE F660 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.zte.com.cn/...

ZTE F460/F660 cable modems contain an unauthenticated backdoor

Overview ZTE F460/F660 cable modems contain an unauthenticated backdoor. Description ZTE F460/F660 cable modems contain an unauthenticated backdoor. The webshellcmd.gch script accepts unauthenticated commands that have administrative access to the device. It has been reported that the...