EDB-33803
PoCZTE WXV10 W300 - Multiple Vulnerabilities
view exploit source exploit_dbtype webappsauthor Osanda Malith Jayathissapublished 2014-06-18catalog exploit_db
01
exploited CVEs (4)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-4019US | high7.5 | Exploit | ||
ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficient access control, which allows remote attackers to read backu… | ||||
| CVE-2014-4154US | medium5.0 | Exploit | ||
ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the… | ||||
| CVE-2014-4018US | high7.8 | Exploit | ||
The ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via un… | ||||
| CVE-2014-4155US | medium6.8 | Exploit | ||
Cross-site request forgery (CSRF) vulnerability in the ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK allows remote attackers to hijack the authentication of administrators… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan