2 matches found
CVE-2015-7249: Undefined Security Weakness
ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.kPE allow remote authenticated users to bypass intended access restrictions via a modified request, as demonstrated by leveraging the support account to change a password via a cgi-bin/webproc accountpsd action...
6.8CVSS6.3AI score0.05534EPSS
SaveExploits4References2
PT-2015-7492
Name of the Vulnerable Software and Affected Versions ZTE ZXHN H108N R1A versions before ZTE.bhs.ZXHNH108NR1A.k PE Description The issue allows remote authenticated users to bypass intended access restrictions via a modified request. This can be demonstrated by leveraging the support account to...
6.8CVSS0.05534EPSS
SaveExploits4References5
20