Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
connoppp.cgi on ZTE ZXDSL 831CII devices does not require HTTP Basic Authentication, which allows remote attackers to modify the PPPoE configuration or set up a malicious configuration via a GET request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ZTE ZXDSL 831CII 安全漏洞
Vulnerability Description
ZTE ZXDSL 831CII是中国中兴通讯(ZTE)公司的一款ADSL调制解调器(Modem)产品。 ZTE ZXDSL 831CII中的connoppp.cgi文件存在安全漏洞,该漏洞源于程序没有要求HTTP Basic Authentication。远程攻击者可通过发送GET请求利用该漏洞修改PPPoE配置或设置恶意的配置。
CVSS Information
N/A
Vulnerability Type
N/A