CVE-2014-8493

This exploit demonstrates an authentication bypass vulnerability in ZTE ZXHN H108L routers, allowing unauthenticated users to modify CWMP (TR-069) configuration settings via a POST request. The PoC sends a crafted payload to the router's web interface, enabling an attacker to redirect the device to a malicious ACS server.

This exploit demonstrates an authentication bypass vulnerability in ZTE ZXHN H108L routers by sending a crafted POST request to the CWMP configuration endpoint without requiring authentication. It allows an attacker to modify CWMP settings, potentially redirecting the router to a malicious ACS server.