CVE-2014-9118 – The web administrative portal in Zhone zNID GPON 2426A before S3.0.501 al

The web administrative portal in Zhone zNID GPON 2426A before S3.0.501 allows remote attackers to execute arbitrary commands via shell metacharacters in the ipAddr parameter to zhnping.cmd.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9118

Reference (s):

• BUGTRAQ:20151012 Multiple Vulnerabilities found in ZHONE
• URL: http://www.securityfocus.com/archive/1/536663/100/0/threaded
• EXPLOIT-DB:38453
• URL: https://www.exploit-db.com/exploits/38453/
• FULLDISC:20151013 Vantage Point Security Advisory 2015-002