Multiple cross-site request forgery (CSRF) vulnerabilities in ZTE ZXDSL 831CII allow remote attackers to hijack the authentication of administrators for requests that disable modem lan ports via the (1) enblftp, (2) enblhttp, (3) enblsnmp, (4) enbltelnet, (5) enbltftp, (6) enblicmp, or (7) enblssh parameter to accesslocal.cmd.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2014-11-20T17:00:00
Updated: 2017-09-07T15:57:01
Reserved: 2014-11-20T00:00:00
Link: CVE-2014-9027
JSON object: View
NVD Information
Status : Modified
Published: 2014-11-20T17:50:16.583
Modified: 2017-09-08T01:29:31.933
Link: CVE-2014-9027
JSON object: View
Redhat Information
No data.
CWE