← back
CVE-2015-7249

CVE-2015-7249

EPSS 5.5%
ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote authenticated users to bypass intended access restrictions via a modified request, as demonstrated by leveraging the support account to change a password via a cgi-bin/webproc accountpsd action.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/38773/unverifiedexploitdbwww.exploit-db.com/exploits/38773unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://www.exploit-db.com/exploits/38773/https://www.kb.cert.org/vuls/id/391604https://www.kb.cert.org/vuls/id/BLUU-9ZDJWAhttp://www.securityfocus.com/bid/77421