ZTEUSA ZXDSL 831CII
Approved changes feed: RSS · Atom
cpe:2.3:h:zte:zxdsl_831cii:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Zte (a03dfd9f-ec80-5d2d-8d2d-86a72c3ab055) |
|---|---|
| Product | Zxdsl 831Cii (d4ac77b3-d670-5730-84df-27f881d64700) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-16953 |
not_vulnerable | 2026-06-08 05:09:07.621227 |
Details available
connoppp.cgi on ZTE ZXDSL 831CII devices does not require HTTP Basic Authentication, which allows remote attackers to modify the PPPoE configuration or set up a malicious configuration via a GET request.
Published: 2017-12-01T17:00:00.000Z
Updated: 2024-08-05T20:43:59.680Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9020 |
vulnerable | 2026-06-08 05:06:10.618006 |
Details available
Cross-site scripting (XSS) vulnerability in the Quick Stats page (psilan.cgi) in ZTE ZXDSL 831 and 831CII allows remote attackers to inject arbitrary web script or HTML via the domainname parameter in a save action. NOTE: this issue was SPLIT from CVE-2014-9021 per ADT1 due to different affected products and codebases.
Published: 2014-11-20T17:00:00.000Z
Updated: 2024-08-06T13:33:13.374Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.