Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
dasanzhone znid 2426a firmware - vulnerabilities and exploits
(subscribe to this query)
9
CVSSv2
CVE-2014-9118
The web administrative portal in Zhone zNID GPON 2426A before S3.0.501 allows remote malicious users to execute arbitrary commands via shell metacharacters in the ipAddr parameter to zhnping.cmd.
Dasanzhone Znid 2426a Firmware -
1 EDB exploit
6.5
CVSSv2
CVE-2014-8356
The web administrative portal in Zhone zNID 2426A before S3.0.501 allows remote authenticated users to bypass intended access restrictions via a modified server response, related to an insecure direct object reference.
Dasanzhone Znid 2426a Firmware
1 EDB exploit
4.3
CVSSv2
CVE-2019-10677
Multiple Cross-Site Scripting (XSS) issues in the web interface on DASAN Zhone ZNID GPON 2426A EU version S3.1.285 devices allow a remote malicious user to execute arbitrary JavaScript via manipulation of an unsanitized GET parameter: /zhndnsdisplay.cmd (name), /wlsecrefresh.wl (...
Dasanzhone Znid Gpon 2426a Eu Firmware
1 EDB exploit
4
CVSSv2
CVE-2014-8357
backupsettings.html in the web administrative portal in Zhone zNID GPON 2426A before S3.0.501 places a session key in a URL, which allows remote malicious users to obtain arbitrary user passwords via the sessionKey parameter in a getConfig action to backupsettings.conf.
Dasanzhone Znid 2426a Firmware
1 EDB exploit
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
type confusion
IMAP
CVE-2024-36103
CVE-2024-28995
CVE-2024-37325
CVE-2024-30078
CVE-2024-30082
SQL injection
CVE-2024-30052
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started