Unrated severityNVD Advisory· Published Mar 11, 2014· Updated Jun 17, 2026

CVE-2014-2321

Description

web_shell_cmd.gch on ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests, as demonstrated by using "set TelnetCfg" commands to enable a TELNET service with specified credentials.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zte/F460llm-create2 versions
(expand)+ 1 more
- (no CPE)
- cpe:2.3:h:zte:f460:-:*:*:*:*:*:*:*
Zte/F660llm-create2 versions
(expand)+ 1 more
- (no CPE)
- cpe:2.3:h:zte:f660:-:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

community.rapid7.com/community/infosec/blog/2014/03/03/disclosure-r7-2013-18-zte-f460-and-zte-f660-webshellcmdgch-backdoornvdExploit
www.kb.cert.org/vuls/id/600724nvdUS Government Resource
www.myxzy.com/post-411.htmlnvd

News mentions

TuxBot v3: Inside an IoT Botnet Framework With LLM-Assisted Development
Unit 42 · Jul 15, 2026

cvss	0.000
epss	0.047
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000