CVE-2014-9184

ZTE ZXDSL 831CII - Unauthenticated Authentication Bypass via Direct CGI Request

Title source: llm
STIX 2.1

Description

ZTE ZXDSL 831CII allows remote attackers to bypass authentication via a direct request to (1) main.cgi, (2) adminpasswd.cgi, (3) userpasswd.cgi, (4) upload.cgi, (5) conprocess.cgi, or (6) connect.cgi.

References (1)

Core 1

Scores

EPSS 0.0694
EPSS Percentile 91.5%

Details

CWE
CWE-287
Status published
Products (1)
zte/zxdsl 831cii
Published Dec 02, 2014
Tracked Since Feb 18, 2026