Описание
ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated non-administrator users to change the admin password by intercepting an outgoing password change request, and changing the username parameter from "support" to "admin".
Ссылки
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Mailing ListThird Party Advisory
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Mailing ListThird Party Advisory
- Third Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:zte:zxv10_w300_firmware:w300v2.1.0f_er7_pe_o57:*:*:*:*:*:*:*
cpe:2.3:h:zte:zxv10_w300:-:*:*:*:*:*:*:*
Конфигурация 2
Одновременно
cpe:2.3:o:zte:zxv10_w300_firmware:w300v2.1.0h_er7_pe_o57:*:*:*:*:*:*:*
cpe:2.3:h:zte:zxv10_w300:-:*:*:*:*:*:*:*
EPSS
Процентиль: 95%
0.16737
Средний
7.5 High
CVSS3
8.5 High
CVSS2
Дефекты
CWE-640
Связанные уязвимости
CVSS3: 7.5
github
больше 3 лет назад
ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated non-administrator users to change the admin password by intercepting an outgoing password change request, and changing the username parameter from "support" to "admin".
EPSS
Процентиль: 95%
0.16737
Средний
7.5 High
CVSS3
8.5 High
CVSS2
Дефекты
CWE-640