Zhone Insecure Reference / Password Disclosure / Command Injection
Posted by deepcore on October 13, 2015 – 10:15 am
Zhone ZNID GPON 2426A suffers from insecure direct object reference, password disclosure, command injection, cross site scripting, and privilege escalation vulnerabilities. Versions prior to S3.0.501 are affected.
Post a reply
You must be logged in to post a comment.