CVE-2015-7257: High severity zte zxv10 w300 vulnerability
ZTE ADSL ZXV10 W300 modems W300V2.1.0fER7PEO57 and W300V2.1.0hER7PEO57 allow remote authenticated non-administrator users to change the admin password by intercepting an outgoing password change request, and changing the username parameter from "support" to "admin".
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7257?
CVE-2015-7257 is considered a high severity vulnerability due to the potential for unauthorized access and administrative control.
How do I fix CVE-2015-7257?
To mitigate CVE-2015-7257, users should update the ZTE ZXV10 W300 firmware to the latest version provided by ZTE that addresses this vulnerability.
Who is affected by CVE-2015-7257?
Users of ZTE ADSL ZXV10 W300 modems running the firmware versions W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 are affected by CVE-2015-7257.
What type of attacks does CVE-2015-7257 enable?
CVE-2015-7257 enables remote authenticated non-administrator users to change the admin password, potentially allowing them to gain control over affected devices.
Is CVE-2015-7257 a local or remote vulnerability?
CVE-2015-7257 is a remote vulnerability, as it can be exploited over the network by authenticated users.