Dasanzhone Znid 2426a Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Dasanzhone Znid 2426a Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2014-8356 — CVSS 8.8 (high): The web administrative portal in Zhone zNID 2426A before S3.0.501 allows remote authenticated users to bypass intended access restrictions…
• CVE-2014-8357 — CVSS 8.8 (high): backupsettings.html in the web administrative portal in Zhone zNID GPON 2426A before S3.0.501 places a session key in a URL, which allows…
• CVE-2014-9118 — CVSS 8.8 (high): The web administrative portal in Zhone zNID GPON 2426A before S3.0.501 allows remote attackers to execute arbitrary commands via shell…