Approved changes feed: RSS · Atom

cpe:2.3:h:dasanzhone:znid_gpon_2426a_eu:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorDasanzhone (7d124378-086b-5a99-9b9e-d36472ea252c)
ProductZnid Gpon 2426A Eu (181287ca-4542-59cb-86be-b3ac10dd56b6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-10677 not_vulnerable 2026-06-08 05:12:24.897479 Details available
Multiple Cross-Site Scripting (XSS) issues in the web interface on DASAN Zhone ZNID GPON 2426A EU version S3.1.285 devices allow a remote attacker to execute arbitrary JavaScript via manipulation of an unsanitized GET parameter: /zhndnsdisplay.cmd (name), /wlsecrefresh.wl (wlWscCfgMethod, wl_wsc_reg).
Published: 2019-09-05T13:23:06.000Z
Updated: 2024-08-04T22:32:01.018Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.