CVE-2014-9019: CSRF
Multiple cross-site request forgery (CSRF) vulnerabilities in ZTE ZXDSL 831CII allow remote attackers to hijack the authentication of administrators for requests that (1) change the admin user name or (2) conduct cross-site scripting (XSS) attacks via the sysUserName parameter in a save action to adminpasswd.cgi or (3) change the admin user password via the sysPassword parameter in a save action to adminpasswd.cgi.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-9019?
The severity of CVE-2014-9019 is considered high due to its potential to allow unauthorized changes to administrator settings.
How do I fix CVE-2014-9019?
To fix CVE-2014-9019, apply any available firmware updates from ZTE that address the CSRF vulnerabilities.
What systems are affected by CVE-2014-9019?
CVE-2014-9019 specifically affects the ZTE ZXDSL 831CII model.
What are the main vulnerabilities described in CVE-2014-9019?
CVE-2014-9019 describes multiple cross-site request forgery (CSRF) vulnerabilities that can be exploited to hijack administrator authentication.
Can CVE-2014-9019 lead to remote attacks?
Yes, CVE-2014-9019 can allow remote attackers to perform unauthorized actions by hijacking administrator authentication.