PT-2014-5677 · Zte · Zte Zxv10 W300

Osanda Malith Jayathissa + 1 · Published 2014-07-16 · Updated 2014-07-16 · CVE-2014-4018

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions ZTE ZXV10 W300 router version W300V1.0.0a ZRD LK

Description The issue concerns a default password set as admin for the admin account, making it easier for remote attackers to gain access through unspecified vectors.

Recommendations For ZTE ZXV10 W300 router version W300V1.0.0a ZRD LK, change the default admin password to a strong and unique password to prevent unauthorized access.

Exploit

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2014-4018

Affected Products

Zte Zxv10 W300

References · 5

• 🔥 https://osandamalith.wordpress.com/2014/06/15/zte-wxv10-w300-multiple-vulnerabilities · Exploit
• 🔥 https://exploit-db.com/exploits/33803 · Exploit
• 🔥 http://packetstormsecurity.com/files/127129/ZTE-WXV10-W300-Disclosure-CSRF-Default.html · Exploit
• 🔥 http://exploit-db.com/exploits/33803 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-4018 · Security Note