CVE-2015-7257

ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated non-administrator users to change the admin password by…

published August 24, 2017

CVSS
—
EPSS
7%
Percentile
93.9
In the wild
Unconfirmed
What it is

ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated non-administrator users to change the admin password by intercepting an outgoing password change request, and changing the username parameter from "support" to "admin".

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06710 · 93.9th percentile
Published
2017-08-24T20:00Z
EPSS history
Timeline
  • 24 AUG 20:00Z
    ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated non-administrator users to change the admin password by…
    cvelistv5