zte zxv10 w300 firmware vulnerabilities and exploits

(subscribe to this query)

ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficient access control, which allows remote malicious users to obtain the PPPoE/PPPoA password via a direct request for basic/tc2wanfun.js.

Zte Zxv10 W300 Firmware 1.0.0a Zrd Lk Zte Zxv10 W300 -

1 EDB exploit

Cross-site request forgery (CSRF) vulnerability in the ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK allows remote malicious users to hijack the authentication of administrators for requests that change the admin password via a request to Forms/tools_admin_1.

Zte Zxv10 W300 Firmware 1.0.0a Zrd Lk Zte Zxv10 W300 -

1 EDB exploit

The ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK has a default password of admin for the admin account, which makes it easier for remote malicious users to obtain access via unspecified vectors.

Zte Zxv10 W300 Firmware 1.0.0a Zrd Lk Zte Zxv10 W300 -

1 EDB exploit

ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated non-administrator users to change the admin password by intercepting an outgoing password change request, and changing the username parameter from "support" to "...

Zte Zxv10 W300 Firmware W300v2.1.0f Er7 Pe O57 Zte Zxv10 W300 Firmware W300v2.1.0h Er7 Pe O57

1 EDB exploit

ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow user accounts to have multiple valid username and password pairs, which allows remote authenticated users to login to a target account via any of its username and password pairs.

Zte Zxv10 W300 Firmware W300v2.1.0f Er7 Pe O57 Zte Zxv10 W300 Firmware W300v2.1.0h Er7 Pe O57

1 EDB exploit

ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated users to obtain user passwords by displaying user information in a Telnet connection.

Zte Zxv10 W300 Firmware W300v2.1.0f Er7 Pe O57 Zte Zxv10 W300 Firmware W300v2.1.0h Er7 Pe O57

1 EDB exploit

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE and ZXV10 W300 devices W300V1.0.0f_ER1_PE allow remote authenticated users to bypass intended access restrictions, and discover credentials and keys, by reading the configuration file, a different vulnerability than CVE-...

Zte Zxhn H108n R1a Firmware Zte Zxv10 W300 Firmware

1 EDB exploit

ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficient access control, which allows remote malicious users to read backup files via a direct request for rom-0.

Zte Zxv10 W300 Firmware W300v1.0.0a Zrd Lk

1 EDB exploit

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote malicious users to discover usernames and password hashes by reading the cgi-bin/webproc HTML source code, a different vulnerability than CVE-2015-8703.

Zte Zxhn H108n R1a Firmware

1 EDB exploit

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote authenticated users to bypass intended access restrictions via a modified request, as demonstrated by leveraging the support account to change a password via a cgi-bin/webproc accountpsd action.

Zte Zxhn H108n R1a Firmware

1 EDB exploit

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook