Hardcoded Password Vulnerability in ZTE ZXV10 W300 Router
CVE-2014-0329

Currently unrated

Key Information:

Vendor: Zte
Status: Zxv10 W300
Vendor: CVE Published:; 4 February 2014

What is CVE-2014-0329?

The TELNET service on the ZTE ZXV10 W300 router version 2.1.0 contains a hardcoded password that concludes with 'airocon' for the admin account. This flaw significantly compromises the device's security, as malicious actors can exploit the knowledge of MAC address characters found at the start of the password to gain unauthorized administrative access, thereby potentially allowing full control over the router.