cve-2026-34474-zte-h298a-h108n-sensitive-data-exposure

CVE-2026-34474: ZTE H298A / H108N 通过 ETHCheat 泄露秘密 CVE-2026-34474 的技术分析：未经过身份验证的 ETHCheat=1 请求会导致受影响的 ZTE ZXHN H298A 1.1 和 H108N 2.6 路由器在响应标记中返回实时的管理员密码、ESSID 和 WLAN PSK。 摘要 观察到的利用路径是未经验证的管理页面泄露。精心构造的 GET 请求 getpage.lua?pid=1000&ETHCheat=1 返回包含 OBJUSERINFOIDPassword1、WLANPSKKeyPassphrase1 和...

ZTE H298A / H108N - Unauthenticated Credential Exposure

Exploit Title: ZTE H298A / H108N - Unauthenticated Credential Exposure via ETHCheat Parameter Date: 2026-05-20 Exploit Author: Mina Nageh Salalma Monx Research Vendor Homepage: https://www.zte.com.cn Software Link:...

📄 ZTE ZXHN H298A 1.1 / H108N 2.6 Unauthenticated Credential Disclosure

ZTE ZXHN H298A 1.1 and H108N 2.6 suffer from an unauthenticated credential exposure vulnerability via the ETHCheat parameter in getpage.lua. Title: ZTE ZXHN H298A 1.1 / H108N 2.6 - Unauthenticated Credential Exposure ETHCheat Parameter Date: 2026-05-20 Author: Mina Nageh Salalma Monx Research CVE...

ZTE 多款产品跨站请求伪造漏洞

The ZTE H168N is a router from the Chinese company ZTE ZTE. A security vulnerability exists in several ZTE products, where an attacker can construct messages to perform unauthorized operations. The following products and versions are affected: ZXHN H168N V3.5.0EG1T5TE, V2.5.5, ZXHN H108N...

ZTE ZXHN H108N R1A devices information disclosure vulnerability

The ZTE ZXHN H108N R1A is a wireless router product from China's ZTE Corporation. An information disclosure vulnerability exists in the ZTE ZXHN H108N R1A ZTE.bhs.ZXHNH108NR1A.hPE version and the ZXV10 W300 W300V1.0.0fER1PE. Allows remote attackers to bypass predetermined access rights and discov...