VULNERABILITY INTELLIGENCE
CVE-2014-0329
CVSS score9.3 HIGH
EPSS probability8.52%
CISA KEVNot currently listed
Published2014-02-04
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
The TELNET service on the ZTE ZXV10 W300 router 2.1.0 has a hardcoded password ending with airocon for the admin account, which allows remote attackers to obtain administrative access by leveraging knowledge of the MAC address characters present at the beginning of the password.
Primary references
- cret@cert.org
- cret@cert.org
- cret@cert.org
- cret@cert.org — US Government Resource
- cret@cert.org
- cret@cert.org
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — US Government Resource
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108