CVE-2014-0329

The TELNET service on the ZTE ZXV10 W300 router 2.1.0 has a hardcoded password ending with airocon for the admin account, which allows remote attackers to…

published February 4, 2014

CVSS
—
EPSS
9%
Percentile
95.0
In the wild
Unconfirmed
What it is

🚨 A hardcoded password on the ZTE ZXV10 W300 router could be your admin's worst nightmare! 🔥 Think of it like a coffee shop where the barista shouts the secret recipe to the regulars — if you know the first few ingredients, the rest is easy to guess. That's this vulnerability: attackers leverage the MAC address to crack a weakly disguised password. If an attacker knows your MAC address, they could waltz right in and gain full control of your router. This means they could change settings, intercept data, or even lock you out of your own network. Yikes!

Put simply

Think of it like a coffee shop where the barista shouts the secret recipe to the regulars — if you know the first few ingredients, the rest is easy to guess. That's this vulnerability: attackers leverage the MAC address to crack a weakly disguised password. This vulnerability arises from a hardcoded password for the admin account on the TELNET service of the ZTE ZXV10 W300 router. The password relies on knowledge of the MAC address, which makes it trivially exploitable for attackers who have that information.

What to do

If an attacker knows your MAC address, they could waltz right in and gain full control of your router. This means they could change settings, intercept data, or even lock you out of your own network. Yikes! To secure your router, change the default password immediately if feasible. If there’s an option to disable the TELNET service, do that too! Regularly check for firmware updates that may address this issue. You've got this! By taking these steps, you'll be well on your way to securing your network. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08521 · 95.0th percentile
Published
2014-02-04T02:00Z
EPSS history
Timeline
  • 04 FEB 02:00Z
    The TELNET service on the ZTE ZXV10 W300 router 2.1.0 has a hardcoded password ending with airocon for the admin account, which allows remote attackers to…
    cvelistv5