Free and open-source vulnerability scanner

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

CVE-2014-0329

Published

10 years ago

Last Modified

6 years ago

CVSSv2.0 Severity

High

Impact Analysis

Share on Facebook
Share on LinkedIn
Share on Twitter

The TELNET service on the ZTE ZXV10 W300 router 2.1.0 has a hardcoded password ending with airocon for the admin account, which allows remote attackers to obtain administrative access by leveraging knowledge of the MAC address characters present at the beginning of the password..

CVSSv2.0 Score

Severity: High
Base Score: 9.3/10
Exploit Score: 8.6/10
Access Vector: Network
Access Complexity: Medium
Authentication Required: None
Impact Score: 10/10
Confidentiality Impact: Complete
Availability Impact: Complete
Integrity Impact: Complete

Products Affected

CPE	Affected	Vulnerable	Excluding	Edit
cpe:2.3:h:zte:zxv10_w300:2.1.0:::::::*	Yes	-	-

References

http://www.kb.cert.org/vuls/id/228886
http://osvdb.org/102816
http://www.securityfocus.com/bid/65310
http://blog.alguien.at/2014/02/hackeando-el-router-zte-zxv10-w300-v21.html
http://packetstormsecurity.com/files/125142/ZTE-ZXV10-W300-Hardcoded-Credentials.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/90958