cve-2026-34474-zte-h298a-h108n-sensitive-data-exposure

CVE-2026-34474: ETHCheat를 통한 ZTE H298A / H108N 비밀 유출 인증되지 않은 ETHCheat=1 요청이 영향을 받는 ZTE ZXHN H298A 1.1 및 H108N 2.6 라우터가 응답 마크업에서 활성 관리자 비밀번호, ESSID 및 WLAN PSK를 반환하도록 만드는 CVE-2026-34474에 대한 기술적 분석입니다. 요약 관찰된 익스플로잇 경로는 인증되지 않은 관리 페이지 정보 노출입니다. getpage.lua?pid=1000&ETHCheat=1에 대한 조작된 GET 요청은...

ZTE H298A / H108N - Unauthenticated Credential Exposure

Exploit Title: ZTE H298A / H108N - Unauthenticated Credential Exposure via ETHCheat Parameter Date: 2026-05-20 Exploit Author: Mina Nageh Salalma Monx Research Vendor Homepage: https://www.zte.com.cn Software Link:...

📄 ZTE ZXHN H298A 1.1 / H108N 2.6 Unauthenticated Credential Disclosure

ZTE ZXHN H298A 1.1 and H108N 2.6 suffer from an unauthenticated credential exposure vulnerability via the ETHCheat parameter in getpage.lua. Title: ZTE ZXHN H298A 1.1 / H108N 2.6 - Unauthenticated Credential Exposure ETHCheat Parameter Date: 2026-05-20 Author: Mina Nageh Salalma Monx Research CVE...

ZTE 多款产品跨站请求伪造漏洞

The ZTE H168N is a router from the Chinese company ZTE ZTE. A security vulnerability exists in several ZTE products, where an attacker can construct messages to perform unauthorized operations. The following products and versions are affected: ZXHN H168N V3.5.0EG1T5TE, V2.5.5, ZXHN H108N...

ZTE ZXHN H108N R1A devices information disclosure vulnerability

The ZTE ZXHN H108N R1A is a wireless router product from China's ZTE Corporation. An information disclosure vulnerability exists in the ZTE ZXHN H108N R1A ZTE.bhs.ZXHNH108NR1A.hPE version and the ZXV10 W300 W300V1.0.0fER1PE. Allows remote attackers to bypass predetermined access rights and discov...