CVE-2014-0329

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

8.52%

Published

Feb 4, 2014

Modified

Apr 28, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBZTE ZXV10 W300 Router - Hard-Coded Credentials TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The TELNET service on the ZTE ZXV10 W300 router 2.1.0 has a hardcoded password ending with airocon for the admin account, which allows remote attackers to obtain administrative access by leveraging knowledge of the MAC address characters present at the beginning of the password.

Weaknesses (CWE)

CWE-255

Affected Products (1)

zte · zxv10_w300vulnerable

References (12)

http://blog.alguien.at/2014/02/hackeando-el-router-zte-zxv10-w300-v21.html

http://osvdb.org/102816

http://packetstormsecurity.com/files/125142/ZTE-ZXV10-W300-Hardcoded-Credentials.html

http://www.kb.cert.org/vuls/id/228886

US Government Resource

http://www.securityfocus.com/bid/65310

https://exchange.xforce.ibmcloud.com/vulnerabilities/90958

http://blog.alguien.at/2014/02/hackeando-el-router-zte-zxv10-w300-v21.html

http://osvdb.org/102816

KEV Catalog EPSS Scores Vendors All CVEs