CVE-2014-2321

web_shell_cmd.gch on ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests, as demonstrated by using "set TelnetCfg" commands to enable a TELNET service with specified credentials.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

59.26% chance of exploitation in the next 30 days, 99th percentile

Nuclei

critical · CWE-264

Published

2014-03-11

Updated

2024-09-16

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-2321.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2014-2317
• CVE-2014-2323
• CVE-2014-2314
• CVE-2014-2324
• CVE-2014-2303
• CVE-2014-2326