| tiêu đề | ZTE ZXHN H-Series Routers Multiple H-series models before 2022 Denial of Service |
|---|
| Mô tả | Multiple ZTE H-series router firmware branches are vulnerable to unauthenticated denial of service through an oversized application/x-www-form-urlencoded POST request. The web stack forwards attacker-controlled POST bodies into the CGILua parser before authentication gates matter, and the parser reads and parses the request body as long as it stays below the visible maxinput budget. This can render the router web management interface unavailable and required manual reboot during validation. |
|---|
| Nguồn | ⚠️ https://minanagehsalalma.github.io/cve-2026-34473-unauthenticated-dos-zte-routers/ |
|---|
| Người dùng | MonxResearch (UID 98419) |
|---|
| Đệ trình | 20/05/2026 18:15 (cách đây 5 các tháng) |
|---|
| Kiểm duyệt | 05/06/2026 18:59 (16 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 361708 [ZTE H8102E trước 2021-03-23 Management Interface Từ chối dịch vụ] |
|---|
| điểm | 20 |
|---|