PT-2014-5677 · Zte · Zte Zxv10 W300

Osanda Malith Jayathissa + 1 · Publicado 2014-07-16 · Atualizado 2014-07-16 · CVE-2014-4018

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions ZTE ZXV10 W300 router version W300V1.0.0a ZRD LK

Description The issue concerns a default password set as admin for the admin account, making it easier for remote attackers to gain access through unspecified vectors.

Recommendations For ZTE ZXV10 W300 router version W300V1.0.0a ZRD LK, change the default admin password to a strong and unique password to prevent unauthorized access.

Exploit

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2014-4018

Produtos afetados

Zte Zxv10 W300

Referências · 5

• 🔥 https://osandamalith.wordpress.com/2014/06/15/zte-wxv10-w300-multiple-vulnerabilities · Exploit
• 🔥 https://exploit-db.com/exploits/33803 · Exploit
• 🔥 http://packetstormsecurity.com/files/127129/ZTE-WXV10-W300-Disclosure-CSRF-Default.html · Exploit
• 🔥 http://exploit-db.com/exploits/33803 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-4018 · Nota de Segurança