A vulnerability has been reported in the ZTE ZXDSL 831 II Modem, which can be exploited by malicious people bypass certain security restrictions.

The vulnerability is caused due to the ZTE ZXDSL 831 II Modem not correctly restricting access to certain scripts with administrative functionality (e.g. the "adminpasswd.cgi" script), which can be exploited to reset the administrator's password or disclose the PPPoE username and password.

Solution
Restrict access to trusted users only.

Provided and/or discovered by
SuNHouSe2

Original Advisory
http://milw0rm.com/exploits/9456
http://milw0rm.com/exploits/9473

Deep Links
Links available in Customer Area