Zhone Insecure Reference / Password Disclosure / Command Injection

Vantage Point Security Advisory 2015-002 ======================================== Title: Multiple Vulnerabilities found in ZHONE Vendor: Zhone Vendor URL: http://www.zhone.com Device Model: ZHONE ZNID GPON 2426A 24xx, 24xxA, 42xx, 42xxA, 26xx, and 28xx series models Versions affected: Summary:...

ZTE GPON security vulnerabilities

Authentication bypass, information leakage...

ZTE GPON F427 and possibly F460/F600 - authorization bypass and cleartext password storage

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: ZTE GPON F427 and possibly F460/F600 - authorization bypass and cleartext password storage Author: Jerzy Patraszewski Date: 10 July 2015 Affected software : =================== ZTE GPON: F427 Version: V3.0 Firmware Image:...

ZTE GPON F427 Authorization Bypass / Cleartext Password Storage Vulnerabilities

ZTE GPON F427 and possibly the F460/F600 models suffer from authorization bypass and cleartext password storage vulnerabilities. Title: ZTE GPON F427 and possibly F460/F600 - authorization bypass and cleartext password storage Author: Jerzy Patraszewski Affected software : =================== ZTE...

ZTE GPON F427 Authorization Bypass / Cleartext Password Storage

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: ZTE GPON F427 and possibly F460/F600 - authorization bypass and cleartext password storage Author: Jerzy Patraszewski Date: 10 July 2015 Affected software : =================== ZTE GPON: F427 Version: V3.0 Firmware Image:...

GPON G-93RG1 Cross Site Request Forgery / Code Execution

CSRF Demo Exploit -- document.auto.submit;...

GPON Home Router FTP G-93RG1 - CSRF Command Execution Vulnerability

Exploit for hardware platform in category web applications CSRF Demo Exploit -- document.auto.submit; 0day.today 2018-03-31...

GPON Home Router FTP G-93RG1 - Cross-Site Request Forgery Command Execution

GPON Home Router FTP G-93RG1 - Cross-Site Request Forgery Command Execution CSRF Demo Exploit -- document.auto.submit;...

GPON Home Router FTP G-93RG1 - Cross-Site Request Forgery / Command Execution

CSRF Demo Exploit -- document.auto.submit;...

Zhone GPON 2520 Input Validation Vulnerability

Zhone GPON 2520 is a Zhone solution based on the ITU-TG.984.x standard for broadband passive optical integrated access. A security vulnerability exists in the Zhone GPON 2520. The vulnerability can be exploited by a remote attacker to cause a denial of service with the help of an extra-long strin...

CVE-2015-2055

Zhone GPON 2520 with firmware R4.0.2.566b allows remote attackers to cause a denial of service via a long string in the oldpassword parameter...

Design/Logic Flaw

Zhone GPON 2520 with firmware R4.0.2.566b allows remote attackers to cause a denial of service via a long string in the oldpassword parameter...

CVE-2015-2055

Zhone GPON 2520 with firmware R4.0.2.566b allows remote attackers to cause a denial of service via a long string in the oldpassword parameter...

CVE-2015-2055

Affected product: Zhone GPON 2520 with firmware R4.0.2.566b. Vulnerability: Input validation flaw in the oldpassword parameter that allows a remote attacker to cause a denial of service. Impact: Denial of service; no information on exploitation details provided in the sources. Notes: Connected CN...

PT-2015-5572

Name of the Vulnerable Software and Affected Versions Zhone GPON 2520 version R4.0.2.566b Description The issue allows remote attackers to cause a denial of service. This can be achieved by sending a long string in the oldpassword parameter. Recommendations For Zhone GPON 2520 version R4.0.2.566b...

CVE-2015-2055: Improper Input Validation

Zhone GPON 2520 with firmware R4.0.2.566b allows remote attackers to cause a denial of service via a long string in the oldpassword parameter...

Zhone GPON 2520 R4.0.2.566b - Crash PoC

Exploit for hardware platform in category dos / poc from httplib2 import Http from urllib import urlencode import sys,time main function if name == "main": iflensys.argv != 2: print '' print ' GPON Zhone R4.0.2.566b D.O.S.' print ' Tested on' print ' GPON Zhone 2520' print ' Hardware: 0040-48-02'...

Zhone GPON 2520 R4.0.2.566b - Crash (PoC)

Zhone GPON 2520 R4.0.2.566b - Crash PoC from httplib2 import Http from urllib import urlencode import sys,time main function if name == "main": iflensys.argv != 2: print '' print ' GPON Zhone R4.0.2.566b D.O.S.' print ' Tested on' print ' GPON Zhone 2520' print ' Hardware: 0040-48-02' print '...

Zhone GPON 2520 R4.0.2.566b - Crash (PoC)

from httplib2 import Http from urllib import urlencode import sys,time main function if name == "main": iflensys.argv != 2: print '' print ' GPON Zhone R4.0.2.566b D.O.S.' print ' Tested on' print ' GPON Zhone 2520' print ' Hardware: 0040-48-02' print ' Software: R4.0.2.566b' print ' ' print '...

Huawei HG866 Authentication Bypass

Exploit Title: Huawei HG866 Authentication Bypass Date: Jun 14 2012 Exploit Author: hkm Vendor Homepage: http://www.huawei.com Version: V1R2C01SPC202, R3.2.4.92sbn - R3.4.2.257sbn, 3FE53864AOCB16 Tested on: HG866GTAVER.C, 01, 02 Advisory:...