CVE-2014-2321: Critical severity ZTE F460 vulnerability
webshellcmd.gch on ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests, as demonstrated by using "set TelnetCfg" commands to enable a TELNET service with specified credentials.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-2321?
CVE-2014-2321 has been classified as a high severity vulnerability due to its potential to allow unauthorized administrative access to affected devices.
How do I fix CVE-2014-2321?
To mitigate CVE-2014-2321, users should disable the TELNET service and, if possible, update the firmware of the ZTE F460 or F660 modems to the latest version.
Which devices are affected by CVE-2014-2321?
CVE-2014-2321 specifically affects the ZTE F460 and ZTE F660 cable modem models.
What are the potential impacts of CVE-2014-2321?
The potential impacts of CVE-2014-2321 include unauthorized access to network settings and configurations which can lead to data breaches and network disruption.
Is there a way to detect the exploitation of CVE-2014-2321?
Monitoring device logs for unusual access patterns, especially related to TELNET commands, can help detect exploitation attempts related to CVE-2014-2321.