Published: 11/03/2014 Updated: 11/03/2014

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 890

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

web_shell_cmd.gch on ZTE F460 and F660 cable modems allows remote malicious users to obtain administrative access via sendcmd requests, as demonstrated by using "set TelnetCfg" commands to enable a TELNET service with specified credentials.

Vulnerable Product	Search on Vulmon	Subscribe to Product
zte f660 -
zte f460 -

Windows ZTE Loader CVE-2014-2321 Requires ZMAP For Windows Or BigEar

Windows-ZTE-Loader Windows ZTE Loader CVE-2014-2321 Requires ZMAP For Windows Or BigEar The application works by handling the output of a running scan via zmap or bigear, that output is piped into the zte application, see your operating systems documentation for piping output from a running program via CMD

CWE-264 http://www.kb.cert.org/vuls/id/600724 http://www.myxzy.com/post-411.html https://community.rapid7.com/community/infosec/blog/2014/03/03/disclosure-r7-2013-18-zte-f460-and-zte-f660-webshellcmdgch-backdoor https://nvd.nist.gov https://github.com/injectionmethod/Windows-ZTE-Loader

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2014-2321

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect