Vulnerabilities > ZTE > Zxdsl 831Cii Firmware > High

DATE CVE VULNERABILITY TITLE RISK
2017-12-01 CVE-2017-16953 Improper Authentication vulnerability in ZTE Zxdsl 831Cii Firmware
connoppp.cgi on ZTE ZXDSL 831CII devices does not require HTTP Basic Authentication, which allows remote attackers to modify the PPPoE configuration or set up a malicious configuration via a GET request.
network
low complexity
zte CWE-287
7.5