critical9.3Public exploit code
CVE-2014-0329
The TELNET service on the ZTE ZXV10 W300 router 2.1.0 has a hardcoded password ending with airocon for the admin account, which allows remote attackers to obta…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ZTE ZXV10 W300 Router - Hard-Coded Credentials2014-02-09 · webapps · hardware
Impact
The TELNET service on the ZTE ZXV10 W300 router 2.1.0 has a hardcoded password ending with airocon for the admin account, which allows remote attackers to obtain administrative access by leveraging knowledge of the MAC address characters present at the beginning of the password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zte | Zxv10 W300 | Version 2.1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://blog.alguien.at/2014/02/hackeando-el-router-zte-zxv10-w300-v21.html
- http://osvdb.org/102816
- http://packetstormsecurity.com/files/125142/ZTE-ZXV10-W300-Hardcoded-Credentials.html
- http://www.kb.cert.org/vuls/id/228886
- http://www.securityfocus.com/bid/65310
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90958
- http://blog.alguien.at/2014/02/hackeando-el-router-zte-zxv10-w300-v21.html
- http://osvdb.org/102816
- http://packetstormsecurity.com/files/125142/ZTE-ZXV10-W300-Hardcoded-Credentials.html
- http://www.kb.cert.org/vuls/id/228886
- http://www.securityfocus.com/bid/65310
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90958