CVE-2015-7259: Critical severity zte zxv10 w300 vulnerability
ZTE ADSL ZXV10 W300 modems W300V2.1.0fER7PEO57 and W300V2.1.0hER7PEO57 allow user accounts to have multiple valid username and password pairs, which allows remote authenticated users to login to a target account via any of its username and password pairs.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7259?
CVE-2015-7259 is classified as a high severity vulnerability due to the potential for unauthorized access to user accounts.
How do I fix CVE-2015-7259?
To mitigate CVE-2015-7259, update the firmware of the ZTE ZXV10 W300 to the latest version released by the manufacturer.
What systems are affected by CVE-2015-7259?
CVE-2015-7259 affects ZTE ADSL ZXV10 W300 modems running firmware versions w300v2.1.0f_ER7_PE_O57 and w300v2.1.0h_ER7_PE_O57.
What are the implications of CVE-2015-7259 for users?
Users affected by CVE-2015-7259 may face the risk of account compromise, as multiple username and password pairs can grant access.
Is there a workaround for CVE-2015-7259?
Currently, the recommended action for CVE-2015-7259 is to update the firmware, as there are no effective workarounds available.