ZTE ZXV10 W300 Router信任管理漏洞

CVE ID：CVE-2014-0329 ZTE ZXV10 W300 Router是中国中兴通讯（ZTE）公司的一款无线路由器产品。 ZTE ZXV10 W300路由器2.1.0版本上的TELNET服务中存在安全漏洞，该漏洞源于程序安装使用默认的硬编码凭证，将admin帐户密码‘XXXXairocon’中的前四位设置为MAC地址后四位。远程攻击者可通过已知的密码利用该漏洞获取管理访问权限。 0 ZTE ZXV10 W300 Router 厂商补丁： ZTE ----- 目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接：...

ZTE ZXV10 W300 Router - Hard-Coded Credentials

ZTE ZXV10 W300 Router - Hard-Coded Credentials Exploit Title: ZTE ZXV10 W300 router contains hardcoded credentials Date: 03 Feb 2014 Exploit Author: Cesar Neira Vendor Homepage: http://wwwen.zte.com.cn/ Version: ZTE ZXV10 W300 v2.1 CVE : CVE-2014-0329 Dork Shodan: Basic realm="index.htm"...

ZTE ZXV10 W300 Router - Hard-Coded Credentials

Exploit Title: ZTE ZXV10 W300 router contains hardcoded credentials Date: 03 Feb 2014 Exploit Author: Cesar Neira Vendor Homepage: http://wwwen.zte.com.cn/ Version: ZTE ZXV10 W300 v2.1 CVE : CVE-2014-0329 Dork Shodan: Basic realm="index.htm" References:...

ZTE ZXV10 W300 Router - Hardcoded Credentials

Exploit for hardware platform in category web applications Exploit Title: ZTE ZXV10 W300 router contains hardcoded credentials Date: 03 Feb 2014 Exploit Author: Cesar Neira Vendor Homepage: http://wwwen.zte.com.cn/ Version: ZTE ZXV10 W300 v2.1 CVE : CVE-2014-0329 Dork Shodan: Basic...

ZTE ZXV10 W300 router hard-coded credentials vulnerability-vulnerability warning-the black bar safety net

ZTE ZXV10 W300 routing 2.1.0 version and possibly previous versions,contains hardcoded credentials. CWE-7 9 8 Use the username admin password XXXXairocon where XXXX refers to the device MAC address after the fourth bit can successful connection open the Telnet service, the ZXV10 W300 router...

CVE-2014-0329

The TELNET service on the ZTE ZXV10 W300 router 2.1.0 has a hardcoded password ending with airocon for the admin account, which allows remote attackers to obtain administrative access by leveraging knowledge of the MAC address characters present at the beginning of the password...

ZTE ZXV10 W300 router contains hardcoded credentials

Overview ZTE ZXV10 W300 router version 2.1.0, and possibly earlier versions, contains hardcoded credentials. CWE-798 Description ZTE ZXV10 W300 router contains hardcoded credentials that are useable for the telnet service on the device. The username is "admin" and the password is "XXXXairocon"...

Blackboard LC3000 Laundry Reader Default Telnet Password

The remote device has a telnet service protected by known, default credentials that allow privileged access to the device. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid71096; scriptversion"1.8";...

ASUS RT-N13U Router Built-in Admin Telnet Account with Unchangeable Password

The remote host is running a telnet service with an unchangeable admin account with known credentials admin/admin. An attacker could log into this account and gain complete control of the device. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

TP-Link Print Server TL PS110U Information Enumeration

Exploit Title: TP-Link Print Server Sensitive Information Enumeration Exploit Author: SANTHO Vendor Homepage: http://www.tp-link.com Software Link: http://www.tp-link.com/en/products/details/?model=TL-PS110U Version: TL PS110U TP-Link TL PS110U Print Server runs telnet service which enables an...

TP-Link PS110U Print Server TL - Sensitive Information Enumeration

TP-Link PS110U Print Server TL - Sensitive Information Enumeration Exploit Title: TP-Link Print Server Sensitive Information Enumeration Exploit Author: SANTHO Vendor Homepage: http://www.tp-link.com Software Link: http://www.tp-link.com/en/products/details/?model=TL-PS110U Version: TL PS110U...

TP-Link Print Server TL PS110U - Sensitive Information Enumeration

Exploit for hardware platform in category remote exploits TP-Link TL PS110U Print Server runs telnet service which enables an attacker to access the configuration details without authentication. The PoC can extract device name, MAC address, manufacture name, Printer model, and SNMP Community...

Unprotected Windows CE Console (Telnet)

The remote Windows CE Telnet Console is not protected by a password. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-31993 · D Link · Dir-600 Rev B +1

Name of the Vulnerable Software and Affected Versions: D-Link routers versions prior to 2.14b01 DIR-600 rev B D-Link routers versions prior to 2.13 DIR-300 rev B Description: The web interface of multiple D-Link routers contains an unauthenticated operating system command injection vulnerability ...

WAGO IO 758 Default Linux Credentials

Overview This advisory updates the ICS-CERT Alert titled “ICS-ALERT-12-097-01 - WAGO IPC Vulnerabilities” that was posted on the ICS-CERT Web site on April 06, 2012. This alert detailed a vulnerability report of “hard-coded” credentials and improper access controls in the WAGO I/O System 758...

Lantronix Telnet Service Banner Detection

Detect Lantronix telnet services This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Lantronix Telnet Service Banner Detection', 'Description' = 'Detect Lantronix telnet services', 'Author' =...

FreeBSD Telnet Service Encyption Key ID Buffer Overflow

$Id: $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'FreeBSD...

Linux BSD-derived Telnet Service Encyption Key ID Buffer Overflow

$Id: $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Linux...

Linux BSD-derived Telnet Service Encryption Key ID Buffer Overflow

This module exploits a buffer overflow in the encryption option handler of the Linux BSD-derived telnet service inetutils or krb5-telnet. Most Linux distributions use NetKit-derived telnet daemons, so this flaw only applies to a small subset of Linux systems running telnetd. Module Options msf us...

Schneider Electric Quantum Ethernet Module Hardcoded Credentials Authentication Bypass Vulnerability

Schneider Electric Quantum Ethernet Module is prone to an authentication- bypass vulnerability. Attackers can exploit this issue to gain access to the Telnet port service, Windriver Debug port service, and FTP service. Attackers can exploit this vulnerability to execute arbitrary code within the...