← back
CVE-2014-8356

CVE-2014-8356

EPSS 5.6%
The web administrative portal in Zhone zNID 2426A before S3.0.501 allows remote authenticated users to bypass intended access restrictions via a modified server response, related to an insecure direct object reference.
Affected products
n/a · n/a
public PoCs found — 3
cve_referencepacketstormsecurity.com/files/133921/Zhone-Insecure-Reference-Password-Disclosure-Command-Injection.htmlunverifiedcve_referencewww.exploit-db.com/exploits/38453/unverifiedexploitdbwww.exploit-db.com/exploits/38453unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/133921/Zhone-Insecure-Reference-Password-Disclosure-Command-Injection.htmlhttp://seclists.org/fulldisclosure/2015/Oct/57https://www.exploit-db.com/exploits/38453/