Security Advisory

CVE-2017-16953

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-12-01 17:00:00

Last updated 2024-08-05 20:43:59

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

connoppp.cgi on ZTE ZXDSL 831CII devices does not require HTTP Basic Authentication, which allows remote attackers to modify the PPPoE configuration or set up a malicious configuration via a GET request.

← Browse all CVEs View on cve.org ↗