CVE-2015-8703

Опубликовано: 30 дек. 2015

Источник: nvd

CVSS3: 6.5

CVSS2: 4

EPSS Низкий

Описание

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE and ZXV10 W300 devices W300V1.0.0f_ER1_PE allow remote authenticated users to bypass intended access restrictions, and discover credentials and keys, by reading the configuration file, a different vulnerability than CVE-2015-7248.

Ссылки

http://www.securityfocus.com/bid/77421
https://www.kb.cert.org/vuls/id/391604
Third Party Advisory
US Government Resource
https://www.kb.cert.org/vuls/id/BLUU-9ZDJWA
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/77421
https://www.kb.cert.org/vuls/id/391604
Third Party Advisory
US Government Resource
https://www.kb.cert.org/vuls/id/BLUU-9ZDJWA
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:zte:zxhn_h108n_r1a_firmware:*:*:*:*:*:*:*:*

Версия до zte.bhs.zxhnh108nr1a.h_pe (включая)

cpe:2.3:h:zte:zxhn_h108n_r1a:*:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:zte:zxv10_w300_firmware:*:*:*:*:*:*:*:*

Версия до w300v1.0.0f_er1_pe (включая)

cpe:2.3:h:zte:zxv10_w300:*:*:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.04487

Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-8863-rmh9-4mvj