GCVE - cpe:2.3:h:zte:zxhn_h108n_r1a:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:zte:zxhn_h108n_r1a:*:*:*:*:*:*:*:*

part: h version: * update: *

Vendor	Zte (`a03dfd9f-ec80-5d2d-8d2d-86a72c3ab055`)
Product	Zxhn H108N R1A (`094459dc-ab8f-5bc8-aa3a-dab1a5a7e431`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-8703`	not_vulnerable	2026-06-08 05:07:04.729399	Details available ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE and ZXV10 W300 devices W300V1.0.0f_ER1_PE allow remote authenticated users to bypass intended access restrictions, and discover credentials and keys, by reading the configuration file, a different vulnerability than CVE-2015-7248. Published: 2015-12-30T02:00:00.000Z Updated: 2024-08-06T08:29:21.214Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/77421 https://www.kb.cert.org/vuls/id/BLUU-9ZDJWA https://www.kb.cert.org/vuls/id/391604	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-7252`	not_vulnerable	2026-06-08 05:07:00.208169	Details available Cross-site scripting (XSS) vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attackers to inject arbitrary web script or HTML via the errorpage parameter. Published: 2015-12-30T02:00:00.000Z Updated: 2024-08-06T07:43:45.919Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/77421 https://www.kb.cert.org/vuls/id/BLUU-9ZDJWA https://www.kb.cert.org/vuls/id/391604 https://www.exploit-db.com/exploits/38773/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-7251`	not_vulnerable	2026-06-08 05:07:00.207828	Details available ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE have a hardcoded password of root for the root account, which allows remote attackers to obtain administrative access via a TELNET session. Published: 2015-12-30T02:00:00.000Z Updated: 2024-08-06T07:43:45.699Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/77421 https://www.kb.cert.org/vuls/id/BLUU-9ZDJWA https://www.kb.cert.org/vuls/id/391604 https://www.exploit-db.com/exploits/38773/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-7250`	not_vulnerable	2026-06-08 05:07:00.207467	Details available Absolute path traversal vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attackers to read arbitrary files via a full pathname in the getpage parameter. Published: 2015-12-30T02:00:00.000Z Updated: 2024-08-06T07:43:45.587Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/77421 https://www.kb.cert.org/vuls/id/BLUU-9ZDJWA https://www.kb.cert.org/vuls/id/391604 https://www.exploit-db.com/exploits/38773/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-7249`	not_vulnerable	2026-06-08 05:07:00.207079	Details available ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote authenticated users to bypass intended access restrictions via a modified request, as demonstrated by leveraging the support account to change a password via a cgi-bin/webproc accountpsd action. Published: 2015-12-30T02:00:00.000Z Updated: 2024-08-06T07:43:45.668Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/77421 https://www.kb.cert.org/vuls/id/BLUU-9ZDJWA https://www.kb.cert.org/vuls/id/391604 https://www.exploit-db.com/exploits/38773/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-7248`	not_vulnerable	2026-06-08 05:07:00.206607	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.