CVE-2014-0329: Critical severity ZTE ZXV10 W300 vulnerability
The TELNET service on the ZTE ZXV10 W300 router 2.1.0 has a hardcoded password ending with airocon for the admin account, which allows remote attackers to obtain administrative access by leveraging knowledge of the MAC address characters present at the beginning of the password.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0329?
CVE-2014-0329 is classified as a high-severity vulnerability due to the presence of hardcoded credentials that can be exploited for unauthorized administrative access.
How do I fix CVE-2014-0329?
To mitigate CVE-2014-0329, users should disable the TELNET service and utilize secure alternatives for remote management if possible.
Who is affected by CVE-2014-0329?
CVE-2014-0329 affects users of the ZTE ZXV10 W300 router running version 2.1.0.
What is the impact of CVE-2014-0329?
The impact of CVE-2014-0329 allows remote attackers to gain administrative access to the router, potentially compromising the network.
How can attackers exploit CVE-2014-0329?
Attackers can exploit CVE-2014-0329 by leveraging the knowledge of the MAC address characters to obtain the hardcoded password for the admin account.