Details of VAR-201410-1440

ID

VAR-201410-1440

TITLE

ZTE ZXDSL 931VII 'manager_dev_config_t.gch' Information Disclosure Vulnerability

Trust: 0.9

sources: CNVD: CNVD-2014-07233 // BID: 70658

DESCRIPTION

ZTE ZXDSL is an ADSL device. ZTE ZXDSL 931VII is a router product of ZTE Corporation of China. An information disclosure vulnerability exists in ZTE ZXDSL 931VII. Attackers can use this vulnerability to gain access to sensitive information and launch other attacks. ZTE ZXDSL 931VII is prone to an information-disclosure vulnerability

Trust: 1.35

sources: CNVD: CNVD-2014-07233 // CNNVD: CNNVD-201410-1277 // BID: 70658

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2014-07233

AFFECTED PRODUCTS

vendor:	zte	model:	zxdsl 931vii	scope:	-	version:	-	Trust: 0.6
vendor:	zte	model:	zxdsl 931vii	scope:	eq	version:	0	Trust: 0.3

sources: CNVD: CNVD-2014-07233 // BID: 70658

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD:	CNVD-2014-07233
value:	MEDIUM
Trust: 0.6

CNVD:	CNVD-2014-07233
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

sources: CNVD: CNVD-2014-07233

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201410-1277

TYPE

information disclosure

Trust: 0.6

sources: CNNVD: CNNVD-201410-1277

EXTERNAL IDS

db:	BID	id:	70658	Trust: 1.5
db:	CNVD	id:	CNVD-2014-07233	Trust: 0.6
db:	CNNVD	id:	CNNVD-201410-1277	Trust: 0.6

sources: CNVD: CNVD-2014-07233 // BID: 70658 // CNNVD: CNNVD-201410-1277

REFERENCES

url:	http://www.securityfocus.com/bid/70658	Trust: 1.2
url:	http://reverseengineering.stackexchange.com/questions/3593/re-compressed-backup-file-router-linux-based-so-is-it-compresed-with-zlib	Trust: 0.3
url:	http://www.zte.com.cn/	Trust: 0.3

sources: CNVD: CNVD-2014-07233 // BID: 70658 // CNNVD: CNNVD-201410-1277

CREDITS

L0ukanik0sGR

Trust: 0.9

sources: BID: 70658 // CNNVD: CNNVD-201410-1277

SOURCES

db:	CNVD	id:	CNVD-2014-07233
db:	BID	id:	70658
db:	CNNVD	id:	CNNVD-201410-1277

LAST UPDATE DATE

2022-05-17T01:51:09.436000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2014-07233	date:	2014-10-22T00:00:00
db:	BID	id:	70658	date:	2014-10-16T00:00:00
db:	CNNVD	id:	CNNVD-201410-1277	date:	2014-10-24T00:00:00

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2014-07233	date:	2014-10-22T00:00:00
db:	BID	id:	70658	date:	2014-10-16T00:00:00
db:	CNNVD	id:	CNNVD-201410-1277	date:	2014-10-24T00:00:00