CVE-2014-4154: Undefined Security Weakness

ZTE ZXV10 W300 router with firmware W300V1.0.0aZRDLK stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the PPPoE/PPPoA password via a direct request for basic/tc2wanfun.js...

PT-2014-5706

Name of the Vulnerable Software and Affected Versions ZTE ZXV10 W300 router with firmware W300V1.0.0a ZRD LK Description The issue concerns the storage of sensitive information under the web root with insufficient access control. This allows remote attackers to obtain the PPPoE/PPPoA password via...