Login Request a demo
ZH
Product
Zxhn H108n R1a Firmware
by Zte · last CVE Dec 30, 2015
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 1High 2Medium 3Low 0
Severity
All severities6Critical1High2Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Zxhn H108n R1a Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2015-7251
9.8
11%
Dec 30
ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE have a hardcoded password of root for the root account, which allows remote attackers to obtain administrative access…
Affected: through zte.bhs.zxhnh108nr1a.h_pe
CVE-2015-7248
7.5
7%
Dec 30
ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote attackers to discover usernames and password hashes by reading the cgi-bin/webproc HTML source code, a…
Affected: through zte.bhs.zxhnh108nr1a.h_pe
CVE-2015-7250
7.5
16%
Dec 30
Absolute path traversal vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attackers to read arbitrary files via a full…
Affected: through zte.bhs.zxhnh108nr1a.h_pe
CVE-2015-8703
6.5
5%
Dec 30
ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE and ZXV10 W300 devices W300V1.0.0f_ER1_PE allow remote authenticated users to bypass intended access restrictions, and…
Affected: through zte.bhs.zxhnh108nr1a.h_pe
CVE-2015-7252
6.1
3%
Dec 30
Cross-site scripting (XSS) vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attackers to inject arbitrary web script…
Affected: through zte.bhs.zxhnh108nr1a.h_pe
CVE-2015-7249
4.9
6%
Dec 30
ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote authenticated users to bypass intended access restrictions via a modified request, as demonstrated by…
Affected: through zte.bhs.zxhnh108nr1a.h_pe
Showing 6