CVE-2014-4019

CVE-2014-4019 affects ZTE ZXV10 W300 routers (firmware W300V1.0.0a_ZRD_LK). The issue is improper access control that allows remote attackers to read the ROM-0 backup file via a direct request, exposing sensitive router configuration/password data. Described in NVD as a network-attackable vulnera...

VulnCheck KEV: CVE-2014-4019

ZTE ZXV10 W300 router with firmware W300V1.0.0aZRDLK stores sensitive information under the web root with insufficient access control, which allows remote attackers to read backup files via a direct request for rom-0...

ZTE WXV10 W300 Disclosure / CSRF / Default

Exploit Title: ZTE WXV10 W300 Multiple Vulnerabilities Date: 17-05-2014 Server Version: RomPager/4.07 UPnP/1.0 Tested Routers: ZTE ZXV10 W300 Firmware: W300V1.0.0aZRDLK ADSL Firmware: FwVer:3.11.2.175TC3086 HwVer:T14.F75.0 Tested on: Kali Linux x8664 Exploit Author: Osanda Malith Jayathissa...