Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Dasanzhone Clear all filters
TI-2014-06868 CVE-2014-8356 · GHSA-r8v2-57gh-7g47

The web administrative portal in Zhone zNID 2426A before S3.0.501 allows remote…

Priority MEDIUM 47

The web administrative portal in Zhone zNID 2426A before S3.0.501 allows remote authenticated users to bypass intended access restrictions via a modified server response, related to an insecure direct object reference.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.05636 Published 2019-11-21 No fix listed CWE-639
TI-2019-07970 CVE-2019-10677 · GHSA-f7w7-2p6g-9qfv

Multiple Cross-Site Scripting (XSS) issues in the web interface on DASAN Zhone ZNID GPON…

Priority LOW 37

Multiple Cross-Site Scripting (XSS) issues in the web interface on DASAN Zhone ZNID GPON 2426A EU version S3.1.285 devices allow a remote attacker to execute arbitrary JavaScript via manipulation of an unsanitized GET pa…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.07253 Published 2019-09-05 No fix listed CWE-79
TI-2014-06869 CVE-2014-8357 · GHSA-33rm-chj2-wr75

backupsettings.html in the web administrative portal in Zhone zNID GPON 2426A before…

Priority MEDIUM 46

backupsettings.html in the web administrative portal in Zhone zNID GPON 2426A before S3.0.501 places a session key in a URL, which allows remote attackers to obtain arbitrary user passwords via the sessionKey parameter i…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.05441 Published 2017-10-17 No fix listed CWE-255