Zxv10 W300 Firmware vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

ZW

Product

Zxv10 W300 Firmware

by Zte · last CVE Feb 20, 2020

8

CVEs

0

On KEV

8.8

Max CVSS

0

New 30D

Vulnerabilities8 In the news0 Timeline

Severity mix

Critical 0High 4Medium 1Low 0

Severity

All severities8 Critical0 High4 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Zxv10 W300 Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2015-7259	8.8	9%	Aug 24	ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow user accounts to have multiple valid username and password pairs, which allows remote… Affected: w300v2.1.0f_er7_pe_o57; w300v2.1.0h_er7_pe_o57
CVE-2015-7258	8.8	13%	Aug 24	ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated users to obtain user passwords by displaying user information in a Telnet… Affected: w300v2.1.0f_er7_pe_o57; w300v2.1.0h_er7_pe_o57
CVE-2014-4019	7.5	13%	Feb 20	ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficient access control, which allows remote attackers to read… Affected: w300v1.0.0a_zrd_lk
CVE-2015-7257	7.5	7%	Aug 24	ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated non-administrator users to change the admin password by intercepting an… Affected: w300v2.1.0f_er7_pe_o57; w300v2.1.0h_er7_pe_o57