CVE-2015-7251
published 2015-12-30CVE-2015-7251: ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE have a hardcoded password of root for the root account, which allows remote attackers to obtain…
PriorityP273critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EXPLOIT
EPSS
10.59%
95.2th percentile
ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE have a hardcoded password of root for the root account, which allows remote attackers to obtain administrative access via a TELNET session.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| zte | zxhn_h108n_r1a_firmware | <= zte.bhs.zxhnh108nr1a.h_pe | — |
CVSS provenance
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://www.securityfocus.com/bid/77421https://www.exploit-db.com/exploits/38773/https://www.kb.cert.org/vuls/id/391604https://www.kb.cert.org/vuls/id/BLUU-9ZDJWAhttp://www.securityfocus.com/bid/77421https://www.exploit-db.com/exploits/38773/https://www.kb.cert.org/vuls/id/391604https://www.kb.cert.org/vuls/id/BLUU-9ZDJWA
2015-12-30
Published