CVE-2014-4154

ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficient access control, which allows remote…

published July 16, 2014

CVSS
—
EPSS
7%
Percentile
93.8
In the wild
Unconfirmed
What it is

ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the PPPoE/PPPoA password via a direct request for basic/tc2wanfun.js.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06567 · 93.8th percentile
Published
2014-07-16T14:00Z
EPSS history
Timeline
  • 16 JUL 14:00Z
    ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficient access control, which allows remote…
    cvelistv5