CVE-2014-0329

Published: Feb 4, 2014Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

The TELNET service on the ZTE ZXV10 W300 router 2.1.0 has a hardcoded password ending with airocon for the admin account, which allows remote attackers to obtain administrative access by leveraging knowledge of the MAC address characters present at the beginning of the password.

Affected (1)

Products: Zte: Zxv10 W300

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Zte Zxv10 W300	Version 2.1.0

Related CWEs

References (12)

http://blog.alguien.at/2014/02/hackeando-el-router-zte-zxv10-w300-v21.html

Source: cret@cert.org

http://osvdb.org/102816

Source: cret@cert.org

http://packetstormsecurity.com/files/125142/ZTE-ZXV10-W300-Hardcoded-Credentials.html

Source: cret@cert.org

http://www.kb.cert.org/vuls/id/228886

Source: cret@cert.org

US Government Resource

http://www.securityfocus.com/bid/65310

Source: cret@cert.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/90958

Source: cret@cert.org

http://blog.alguien.at/2014/02/hackeando-el-router-zte-zxv10-w300-v21.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/102816

Source: af854a3a-2127-422b-91ae-364da2661108

http://packetstormsecurity.com/files/125142/ZTE-ZXV10-W300-Hardcoded-Credentials.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/228886

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.securityfocus.com/bid/65310

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/90958

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.