IDCVSSSummaryLast (major) updatePublished
CVE-2014-8356 6.5
The web administrative portal in Zhone zNID 2426A before S3.0.501 allows remote authenticated users to bypass intended access restrictions via a modified server response, related to an insecure direct object reference.
04-12-2019 - 20:25 21-11-2019 - 22:15
CVE-2014-8357 4.0
backupsettings.html in the web administrative portal in Zhone zNID GPON 2426A before S3.0.501 places a session key in a URL, which allows remote attackers to obtain arbitrary user passwords via the sessionKey parameter in a getConfig action to backup
09-10-2018 - 19:53 17-10-2017 - 16:29
CVE-2014-9118 9.0
The web administrative portal in Zhone zNID GPON 2426A before S3.0.501 allows remote attackers to execute arbitrary commands via shell metacharacters in the ipAddr parameter to zhnping.cmd.
09-10-2018 - 19:54 17-10-2017 - 16:29
Back to Top Mark selected
Back to Top