CVE-2014-9184

CVE-2014-9184 affects ZTE ZXDSL 831CII. The vulnerability allows remote attackers to bypass authentication by directly requesting CGI files (main.cgi, adminpasswd.cgi, userpasswd.cgi, upload.cgi, conprocess.cgi, connect.cgi). Evidence across sources confirms this authentication bypass issue with ...

PT-2014-8875

Name of the Vulnerable Software and Affected Versions ZTE ZXDSL 831CII affected versions not specified Description The issue allows remote attackers to bypass authentication. This can be achieved by making a direct request to various API endpoints, including "main.cgi", "adminpasswd.cgi",...

CVE-2014-9184: Improper Authentication

ZTE ZXDSL 831CII allows remote attackers to bypass authentication via a direct request to 1 main.cgi, 2 adminpasswd.cgi, 3 userpasswd.cgi, 4 upload.cgi, 5 conprocess.cgi, or 6 connect.cgi...