CVE-2014-4019: Infoleak
Published Feb 20, 2020
·Updated
ZTE ZXV10 W300 router with firmware W300V1.0.0aZRDLK stores sensitive information under the web root with insufficient access control, which allows remote attackers to read backup files via a direct request for rom-0.
Affected Software
2 affected components
ZTE Zxv10 W300 Firmware=w300v1.0.0a_zrd_lk
ZTE ZXV10 W300
Event History
Feb 20, 2020
CVE Published
via MITRE·05:27 PM
Data Sourced
via MITRE·05:27 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID of this security issue?
The vulnerability ID is CVE-2014-4019.
2
What is the severity of CVE-2014-4019?
The severity of CVE-2014-4019 is high, with a severity value of 7.5.
3
How does CVE-2014-4019 affect the ZTE ZXV10 W300 router?
CVE-2014-4019 allows remote attackers to read backup files on the ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK.
4
How can I exploit CVE-2014-4019?
We do not provide information or support on exploiting vulnerabilities.
5
How can I fix CVE-2014-4019?
To fix CVE-2014-4019, it is recommended to update the firmware of the ZTE ZXV10 W300 router to a version that addresses the vulnerability.