CVE-2014-2321

no score yetEPSS 59%

web_shell_cmd.gch on ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests, as demonstrated by using "set TelnetCfg" commands to enable a TELNET service with specified credentials.

EPSS: 59% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2014-03-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zte:f460
zte:f660

References

http://www.kb.cert.org/vuls/id/600724
http://www.myxzy.com/post-411.html
https://community.rapid7.com/community/infosec/blog/2014/03/03/disclosure-r7-2013-18-zte-f460-and-zte-f660-webshellcmdgch-backdoor
http://www.kb.cert.org/vuls/id/600724
http://www.myxzy.com/post-411.html

Check your stack JSON