All packages
ZTE ZXHN H108N R1A vulnerabilities
3 known CVE vulnerabilities in ZTE ZXHN H108N R1A, translated and rated.
- CVE-2015-7250High
An absolute path traversal vulnerability exists in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE, allowing remote attackers to read arbitrary files via a full pathname in the getpage parameter.
- CVE-2015-7248High
ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote attackers to discover usernames and password hashes by reading the cgi-bin/webproc HTML source code.
- CVE-2015-7251Critical
ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE have a hardcoded password of 'root' for the root account, allowing remote attackers to gain administrative access via a TELNET session.