CVE-2015-8703

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE and ZXV10 W300 devices W300V1.0.0f_ER1_PE allow remote authenticated users to bypass intended access restrictions, and discover credentials and keys, by reading the configuration file, a different vulnerability than CVE-2015-7248.

• CWE-200

• http://www.securityfocus.com/bid/77421
• https://www.kb.cert.org/vuls/id/391604Third Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/BLUU-9ZDJWAThird Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/77421
• https://www.kb.cert.org/vuls/id/391604Third Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/BLUU-9ZDJWAThird Party Advisory, US Government Resource

Published

Dec 30, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-8688Gajim before 0.16.5 allows remote attackers to modify the ro…
• CVE-2015-8697stalin 0.11-5 allows local users to write to arbitrary files…
• CVE-2015-8698CA Release Automation (formerly LISA Release Automation) 5.0…
• CVE-2015-8699Multiple cross-site scripting (XSS) vulnerabilities in CA Re…
• CVE-2015-8701QEMU (aka Quick Emulator) built with the Rocker switch emula…6.5
• CVE-2015-8702The DNS::GetResult function in dns.cpp in InspIRCd before 2.…
• CVE-2015-8704apl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x …
• CVE-2015-8705buffer.c in named in ISC BIND 9.10.x before 9.10.3-P3, when …
• CVE-2015-8707Password reset tokens in Magento CE before 1.9.2.2, and Mage…
• CVE-2015-8708Stack-based buffer overflow in the conv_euctojis function in…
• CVE-2015-8709kernel/ptrace.c in the Linux kernel through 4.4.1 mishandles…
• CVE-2015-8710The htmlParseComment function in HTMLparser.c in libxml2 all…9.8