ZTE F460/F660 are prone to an unauthorized-access vulnerability.

Attackers can exploit this issue to execute arbitrary commands with administrator level access on the affected device. This may aid in further attacks.

Ask the Vendor for an update.

web_shell_cmd.gch on ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests

Try to execute the 'ifconfig' command with a HTTP GET request and check the response.

• http://www.securityfocus.com/bid/65962

---

Updated on 2015-03-25