high8.8Public exploit code
CVE-2015-7258
ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated users to obtain user passwords by displaying user infor…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ZTE ADSL ZXV10 W300 Modems - Multiple Vulnerabilities2015-11-20 · webapps · hardware
Impact
ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated users to obtain user passwords by displaying user information in a Telnet connection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zte | Zxv10 W300 Firmware | Versions w300v2.1.0f_er7_pe_o57, w300v2.1.0h_er7_pe_o57 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/134336/ZTE-ADSL-Authorization-Bypass-Information-Disclosure.html
- http://packetstormsecurity.com/files/134493/ZTE-ADSL-ZXV10-W300-Authorization-Disclosure-Backdoor.html
- http://seclists.org/fulldisclosure/2015/Nov/48
- https://www.exploit-db.com/exploits/38772/
- http://packetstormsecurity.com/files/134336/ZTE-ADSL-Authorization-Bypass-Information-Disclosure.html
- http://packetstormsecurity.com/files/134493/ZTE-ADSL-ZXV10-W300-Authorization-Disclosure-Backdoor.html
- http://seclists.org/fulldisclosure/2015/Nov/48
- https://www.exploit-db.com/exploits/38772/