V6.0.10P2T2 and V6.0.10P2T5 of F6x2W product are impacted by Information leak vulnerability. Unauthorized users could log in directly to obtain page information without entering a verification code.
Weakness
The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| F6x2w_firmware | Zte | 6.0.10p2t2 (including) | 6.0.10p2t2 (including) |
| F6x2w_firmware | Zte | 6.0.10p2t5 (including) | 6.0.10p2t5 (including) |
References
- http://packetstormsecurity.com/files/159135/ZTE-F602W-CAPTCHA-Bypass.html
- http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1012162
- http://packetstormsecurity.com/files/159135/ZTE-F602W-CAPTCHA-Bypass.html
- http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1012162