Test ID:	1.3.6.1.4.1.25623.1.0.105405
Category:	Buffer overflow
Title:	ZHONE ZNID GPON < 3.1.241 Multiple Vulnerabilities
Summary:	ZHONE ZNID GPON is vulnerable to multiple vulnerabilities.
Description:	Summary: ZHONE ZNID GPON is vulnerable to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - Insecure object reference (CVE-2014-8356) - Admin password disclosure (CVE-2014-8357) - Remote code injection (CVE-2014-9118) - Stored cross-site scripting - Privilege escalation via direct object reference Affected Software/OS: Model: ZHONE ZNID GPON 2426A (24xx, 24xxA, 42xx, 42xxA, 26xx, and 28xx series models) < S3.0.501 Solution: Upgrade to version S3.1.241 CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-8356 http://packetstormsecurity.com/files/133921/Zhone-Insecure-Reference-Password-Disclosure-Command-Injection.html http://seclists.org/fulldisclosure/2015/Oct/57 https://www.exploit-db.com/exploits/38453/ Common Vulnerability Exposure (CVE) ID: CVE-2014-8357 Bugtraq: 20151012 Multiple Vulnerabilities found in ZHONE (Google Search) http://www.securityfocus.com/archive/1/536663/100/0/threaded Common Vulnerability Exposure (CVE) ID: CVE-2014-9118
Copyright	Copyright (C) 2015 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.