Read the docs

Dasanzhone

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Dasanzhone records in CISA KEV

No Dasanzhone vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Znid 2426a Firmware 3 records HIGH Znid Gpon 2426a Eu Firmware 1 record LOW

Records

4 records

TI-2014-06868 CVE-2014-8356 · GHSA-r8v2-57gh-7g47

The web administrative portal in Zhone zNID 2426A before S3.0.501 allows remote…

Priority MEDIUM 47

The web administrative portal in Zhone zNID 2426A before S3.0.501 allows remote authenticated users to bypass intended access restrictions via a modified server response, related to an insecure direct object reference.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.05636 Published 2019-11-21 No fix listed CWE-639
TI-2014-06869 CVE-2014-8357 · GHSA-33rm-chj2-wr75

backupsettings.html in the web administrative portal in Zhone zNID GPON 2426A before…

Priority MEDIUM 46

backupsettings.html in the web administrative portal in Zhone zNID GPON 2426A before S3.0.501 places a session key in a URL, which allows remote attackers to obtain arbitrary user passwords via the sessionKey parameter i…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.05441 Published 2017-10-17 No fix listed CWE-255
TI-2019-07970 CVE-2019-10677 · GHSA-f7w7-2p6g-9qfv

Multiple Cross-Site Scripting (XSS) issues in the web interface on DASAN Zhone ZNID GPON…

Priority LOW 37

Multiple Cross-Site Scripting (XSS) issues in the web interface on DASAN Zhone ZNID GPON 2426A EU version S3.1.285 devices allow a remote attacker to execute arbitrary JavaScript via manipulation of an unsanitized GET pa…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.07253 Published 2019-09-05 No fix listed CWE-79
Open these records in search →