Zte

Zxv10 W300

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2020-12695

  • EPSS 4.73%
  • Veröffentlicht 08.06.2020 17:15:09
  • Zuletzt bearbeitet 21.11.2024 05:00:05

The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger is...

7.8

CVE-2014-4018

Exploit
  • EPSS 6.63%
  • Veröffentlicht 16.07.2014 14:19:03
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via unspecified vectors.

5

CVE-2014-4154

Exploit
  • EPSS 10.26%
  • Veröffentlicht 16.07.2014 14:19:03
  • Zuletzt bearbeitet 12.04.2025 10:46:40

ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the PPPoE/PPPoA password via a direct request for basic/tc2wanfun.js.

6.8

CVE-2014-4155

Exploit
  • EPSS 0.2%
  • Veröffentlicht 19.06.2014 14:55:08
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site request forgery (CSRF) vulnerability in the ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK allows remote attackers to hijack the authentication of administrators for requests that change the admin password via a request to Forms/to...

9.3

CVE-2014-0329

  • EPSS 25.02%
  • Veröffentlicht 04.02.2014 05:39:08
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The TELNET service on the ZTE ZXV10 W300 router 2.1.0 has a hardcoded password ending with airocon for the admin account, which allows remote attackers to obtain administrative access by leveraging knowledge of the MAC address characters present at t...