CVE-2014-9021: Multiple cross-site scripting (XSS) vulnerabilities in ZTE ZXDSL 831 allow remote attackers to inject arbit...

Security readout for executives and security teams

CVE-2014-9021 is a reported cross-site scripting issue in ZTE ZXDSL 831 router web pages. An attacker could inject script or HTML through several management-page parameters. The sources do not provide a CVSS score, vendor fix, or evidence of active exploitation. Exposure is most likely where ZTE ZXDSL 831 management interfaces are reachable by untrusted users, especially if remote administration is enabled. The provided affected-product metadata is incomplete, so confirm device model and firmware locally. Prioritize remediation if these routers are internet-managed or used in sensitive network segments. If administration is isolated and devices are legacy edge equipment, handle through normal network hygiene and replacement planning. Mitigation focus: Check ZTE or service-provider guidance for firmware or replacement options.; Restrict router administration to trusted internal networks or VPN access.; Disable remote management if it is not operationally required..

Prepared

Jun 14, 2026, 06:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.