Lucene search

K
prionPRIOn knowledge basePRION:CVE-2014-0329
HistoryFeb 04, 2014 - 5:39 a.m.

Hardcoded credentials

2014-02-0405:39:00
PRIOn knowledge base
www.prio-n.com
2

7.2 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.257 Low

EPSS

Percentile

96.6%

The TELNET service on the ZTE ZXV10 W300 router 2.1.0 has a hardcoded password ending with airocon for the admin account, which allows remote attackers to obtain administrative access by leveraging knowledge of the MAC address characters present at the beginning of the password.

CPENameOperatorVersion
zxv10_w300eq2.1.0

7.2 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.257 Low

EPSS

Percentile

96.6%