CVE-2014-9184: ZTE Zxdsl

Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days.

ZTE ZXDSL 831CII allows remote attackers to bypass authentication via a direct request to (1) main.cgi, (2) adminpasswd.cgi, (3) userpasswd.cgi, (4) upload.cgi, (5) conprocess.cgi, or (6) connect.cgi.

Affected products

• ZTE Zxdsl: version 831cii only

Published 2014-12-02. Last modified 2026-06-17.