CVE-2014-9118

The web administrative portal in Zhone zNID GPON 2426A before S3.0.501 allows remote attackers to execute arbitrary commands via shell metacharacters in the…

published October 17, 2017

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.0th percentile for exploit probability.

CVSS
—
EPSS
53%
Percentile
99.0
In the wild
Unconfirmed
What it is

The web administrative portal in Zhone zNID GPON 2426A before S3.0.501 allows remote attackers to execute arbitrary commands via shell metacharacters in the ipAddr parameter to zhnping.cmd.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.53364 · 99.0th percentile
Published
2017-10-17T16:00Z
EPSS history
Timeline
  • 22 SEP 03:10Z
    EPSS moved 53% → 43%
    epss
  • 06 SEP 03:08Z
    EPSS moved 53% → 43%
    epss
  • 30 AUG 15:28Z
    EPSS moved 43% → 53%
    epss
  • 29 AUG 03:59Z
    EPSS moved 53% → 43%
    epss
  • 17 OCT 16:00Z
    The web administrative portal in Zhone zNID GPON 2426A before S3.0.501 allows remote attackers to execute arbitrary commands via shell metacharacters in the…
    cvelistv5