Read the docs

Dasanzhone

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Dasanzhone records in CISA KEV

No Dasanzhone vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Znid 2426a Firmware 3 records HIGH Znid Gpon 2426a Eu Firmware 1 record LOW

Records

3 records in Znid 2426a Firmware · all components

TI-2014-06868 CVE-2014-8356 · GHSA-r8v2-57gh-7g47

The web administrative portal in Zhone zNID 2426A before S3.0.501 allows remote…

Priority MEDIUM 47

The web administrative portal in Zhone zNID 2426A before S3.0.501 allows remote authenticated users to bypass intended access restrictions via a modified server response, related to an insecure direct object reference.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.05636 Published 2019-11-21 No fix listed CWE-639
TI-2014-06869 CVE-2014-8357 · GHSA-33rm-chj2-wr75

backupsettings.html in the web administrative portal in Zhone zNID GPON 2426A before…

Priority MEDIUM 46

backupsettings.html in the web administrative portal in Zhone zNID GPON 2426A before S3.0.501 places a session key in a URL, which allows remote attackers to obtain arbitrary user passwords via the sessionKey parameter i…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.05441 Published 2017-10-17 No fix listed CWE-255
Open these records in search →