CVEvulnerability
CVE-2014-0329
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-02-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-255
Description
The TELNET service on the ZTE ZXV10 W300 router 2.1.0 has a hardcoded password ending with airocon for the admin account, which allows remote attackers to obtain administrative access by leveraging knowledge of the MAC address characters present at the beginning of the password.
Affected configurations
• zte zxv10 w300 2.1.0
Related
Weakness · not in database (1)
References
- http://blog.alguien.at/2014/02/hackeando-el-router-zte-zxv10-w300-v21.html blog.alguien.at
- http://osvdb.org/102816 osvdb.org
- http://packetstormsecurity.com/files/125142/ZTE-ZXV10-W300-Hardcoded-Credentials.html packetstormsecurity.com
- http://www.kb.cert.org/vuls/id/228886 US Government Resource
- http://www.securityfocus.com/bid/65310 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90958 exchange.xforce.ibmcloud.com
- http://blog.alguien.at/2014/02/hackeando-el-router-zte-zxv10-w300-v21.html blog.alguien.at
- http://osvdb.org/102816 osvdb.org
- http://packetstormsecurity.com/files/125142/ZTE-ZXV10-W300-Hardcoded-Credentials.html packetstormsecurity.com
- http://www.kb.cert.org/vuls/id/228886 US Government Resource
- http://www.securityfocus.com/bid/65310 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90958 exchange.xforce.ibmcloud.com