CVE-2014-9184

ZTE ZXDSL 831CII allows remote attackers to bypass authentication via a direct request to (1) main.cgi, (2) adminpasswd.cgi, (3) userpasswd.cgi, (4) upload.cgi, (5) conprocess.cgi, or (6) connect.cgi.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2014-12-02

Last modified

2024-09-17

Weaknesses

CWE-287

Affected products

• Zxdsl (Zte)

References

• http://packetstormsecurity.com/files/129015/ZTE-ZXDSL-831CII-Insecure-Direct-Object-Reference.html