CVE-2015-7249

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote authenticated users to bypass intended access restrictions via a modified request, as…

published December 30, 2015

CVSS
—
EPSS
6%
Percentile
92.7
In the wild
Unconfirmed
What it is

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote authenticated users to bypass intended access restrictions via a modified request, as demonstrated by leveraging the support account to change a password via a cgi-bin/webproc accountpsd action.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05534 · 92.7th percentile
Published
2015-12-30T02:00Z
EPSS history
Timeline
  • 30 DEC 02:00Z
    ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote authenticated users to bypass intended access restrictions via a modified request, as…
    cvelistv5