CVE-2014-8493

The CVE-2014-8493 issue affects ZTE ZXHN H108L devices running firmware 4.0.0d_ZRQ_GR4, where a crafted request to Forms/access_cwmp_1 can allow remote modification of CWMP configuration. The vulnerability is described as an authentication bypass enabling CWMP configuration edits without proper a...

ZTE ZXHN H108L - Authentication Bypass (1)

Exploit Title: ZTE ZXHN H108L Authentication Bypass Date: 14/11/2014 Exploit Author: Project Zero Labs https://projectzero.gr | [email protected] Vendor Homepage: www.zte.com.cn Version: ZXHN H108LV4.0.0dZRQGR4 Tested on: ZTE ZXHN H108L CVE : CVE-2014-8493 Original post at...