zte zxv10 w300 - vulnerabilities and exploits

(subscribe to this query)

NA

The TELNET service on the ZTE ZXV10 W300 router 2.1.0 has a hardcoded password ending with airocon for the admin account, which allows remote malicious users to obtain administrative access by leveraging knowledge of the MAC address characters present at the beginning of the pass...

Zte Zxv10 W300 2.1.0

1 EDB exploit

7.5

CVSSv3

ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated non-administrator users to change the admin password by intercepting an outgoing password change request, and changing the username parameter from "support" to "...

Zte Zxv10 W300 Firmware W300v2.1.0f Er7 Pe O57 Zte Zxv10 W300 Firmware W300v2.1.0h Er7 Pe O57

1 EDB exploit

8.8

CVSSv3

ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated users to obtain user passwords by displaying user information in a Telnet connection.

Zte Zxv10 W300 Firmware W300v2.1.0f Er7 Pe O57 Zte Zxv10 W300 Firmware W300v2.1.0h Er7 Pe O57

1 EDB exploit

8.8

CVSSv3

ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow user accounts to have multiple valid username and password pairs, which allows remote authenticated users to login to a target account via any of its username and password pairs.

Zte Zxv10 W300 Firmware W300v2.1.0f Er7 Pe O57 Zte Zxv10 W300 Firmware W300v2.1.0h Er7 Pe O57

1 EDB exploit

6.5

CVSSv3

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE and ZXV10 W300 devices W300V1.0.0f_ER1_PE allow remote authenticated users to bypass intended access restrictions, and discover credentials and keys, by reading the configuration file, a different vulnerability than CVE-...

Zte Zxhn H108n R1a Firmware Zte Zxv10 W300 Firmware

1 EDB exploit

7.5

CVSSv3

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote malicious users to discover usernames and password hashes by reading the cgi-bin/webproc HTML source code, a different vulnerability than CVE-2015-8703.

Zte Zxhn H108n R1a Firmware

1 EDB exploit

4.9

CVSSv3

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote authenticated users to bypass intended access restrictions via a modified request, as demonstrated by leveraging the support account to change a password via a cgi-bin/webproc accountpsd action.

Zte Zxhn H108n R1a Firmware

1 EDB exploit

7.5

CVSSv3

Absolute path traversal vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote malicious users to read arbitrary files via a full pathname in the getpage parameter.

Zte Zxhn H108n R1a Firmware

1 EDB exploit

9.8

CVSSv3

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE have a hardcoded password of root for the root account, which allows remote malicious users to obtain administrative access via a TELNET session.

Zte Zxhn H108n R1a Firmware

1 EDB exploit

6.1

CVSSv3

Cross-site scripting (XSS) vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote malicious users to inject arbitrary web script or HTML via the errorpage parameter.

Zte Zxhn H108n R1a Firmware

1 EDB exploit

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook