Zxv10 W300 Firmware vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

ZW

Product

Zxv10 W300 Firmware

by Zte · last CVE Feb 20, 2020

8

CVEs

0

On KEV

8.8

Max CVSS

0

New 30D

Vulnerabilities8 In the news0 Timeline

Severity mix

Critical 0High 4Medium 1Low 0

Severity

All severities8 Critical0 High4 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Zxv10 W300 Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2015-7259	8.8	9%	Aug 24	ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow user accounts to have multiple valid username and password pairs, which allows remote… Affected: w300v2.1.0f_er7_pe_o57; w300v2.1.0h_er7_pe_o57
CVE-2015-7258	8.8	13%	Aug 24	ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated users to obtain user passwords by displaying user information in a Telnet… Affected: w300v2.1.0f_er7_pe_o57; w300v2.1.0h_er7_pe_o57
CVE-2014-4019	7.5	13%	Feb 20	ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficient access control, which allows remote attackers to read… Affected: w300v1.0.0a_zrd_lk
CVE-2015-7257	7.5	7%	Aug 24	ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated non-administrator users to change the admin password by intercepting an… Affected: w300v2.1.0f_er7_pe_o57; w300v2.1.0h_er7_pe_o57
CVE-2015-8703	6.5	5%	Dec 30	ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE and ZXV10 W300 devices W300V1.0.0f_ER1_PE allow remote authenticated users to bypass intended access restrictions, and… Affected: through w300v1.0.0f_er1_pe
CVE-2014-4154	–	7%	Jul 16	ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain… Affected: 1.0.0a_zrd_lk
CVE-2014-4018	–	6%	Jul 16	The ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via… Affected: 1.0.0a_zrd_lk
CVE-2014-4155	–	2%	Jun 19	Cross-site request forgery (CSRF) vulnerability in the ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK allows remote attackers to hijack the authentication of… Affected: 1.0.0a_zrd_lk