cve-2026-34474-zte-h298a-h108n-sensitive-data-exposure

CVE-2026-34474: ZTE H298A / H108N 通过 ETHCheat 泄露秘密 CVE-2026-34474 的技术分析：未经过身份验证的 ETHCheat=1 请求会导致受影响的 ZTE ZXHN H298A 1.1 和 H108N 2.6 路由器在响应标记中返回实时的管理员密码、ESSID 和 WLAN PSK。 摘要 观察到的利用路径是未经验证的管理页面泄露。精心构造的 GET 请求 getpage.lua?pid=1000&ETHCheat=1 返回包含 OBJUSERINFOIDPassword1、WLANPSKKeyPassphrase1 和...

ZTE H298A / H108N - Unauthenticated Credential Exposure

Exploit Title: ZTE H298A / H108N - Unauthenticated Credential Exposure via ETHCheat Parameter Date: 2026-05-20 Exploit Author: Mina Nageh Salalma Monx Research Vendor Homepage: https://www.zte.com.cn Software Link:...

📄 ZTE ZXHN H298A 1.1 / H108N 2.6 Unauthenticated Credential Disclosure

ZTE ZXHN H298A 1.1 and H108N 2.6 suffer from an unauthenticated credential exposure vulnerability via the ETHCheat parameter in getpage.lua. Title: ZTE ZXHN H298A 1.1 / H108N 2.6 - Unauthenticated Credential Exposure ETHCheat Parameter Date: 2026-05-20 Author: Mina Nageh Salalma Monx Research CVE...