CVE-2017-16953: High severity ZTE Zxdsl 831cii Firmware vulnerability
connoppp.cgi on ZTE ZXDSL 831CII devices does not require HTTP Basic Authentication, which allows remote attackers to modify the PPPoE configuration or set up a malicious configuration via a GET request.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-16953?
CVE-2017-16953 is classified as a high severity vulnerability due to its potential for unauthorized access and configuration manipulation.
How do I fix CVE-2017-16953?
To fix CVE-2017-16953, ensure that HTTP Basic Authentication is enabled for the connoppp.cgi script on the ZTE ZXDSL 831CII devices.
What type of devices are affected by CVE-2017-16953?
CVE-2017-16953 affects ZTE ZXDSL 831CII devices that have certain firmware versions.
What kind of attacks can be performed due to CVE-2017-16953?
An attacker can exploit CVE-2017-16953 to remotely modify the PPPoE configuration or set up malicious settings via a GET request.
Is there a patch available for CVE-2017-16953?
There is currently no patch specifically mentioned for CVE-2017-16953, so implementing authentication measures is essential to mitigate the risk.