Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2014-8357

backupsettings.html in the web administrative portal in Zhone zNID GPON 2426A before S3.0.501 places a session key in a URL, which allows remote attackers to obtain arbitrary user passwords via the sessionKey parameter in a getConfig action to backupsettings.conf.

CVSS 3.0 · 8.8 High EPSS 5.4% KEV · Not listed
Vendors
Dasanzhone
Products
Znid 2426a Znid 2426a Firmware
CVE-2014-9118

The web administrative portal in Zhone zNID GPON 2426A before S3.0.501 allows remote attackers to execute arbitrary commands via shell metacharacters in the ipAddr parameter to zhnping.cmd.

CVSS 3.0 · 8.8 High EPSS 53.4% KEV · Not listed
Vendors
Dasanzhone
Products
Znid 2426a Znid 2426a Firmware
CVE-2014-8356

The web administrative portal in Zhone zNID 2426A before S3.0.501 allows remote authenticated users to bypass intended access restrictions via a modified server response, related to an insecure direct object reference.

CVSS 3.1 · 8.8 High EPSS 5.6% KEV · Not listed
Vendors
Dasanzhone
Products
Znid 2426a Znid 2426a Firmware