Access Control Vulnerability in ZTE ZXV10 W300 Router
CVE-2014-4154

Currently unrated

Key Information:

Vendor: Zte
Status: Zxv10 W300 Firmware; Zxv10 W300
Vendor: CVE Published:; 16 July 2014

What is CVE-2014-4154?

The ZTE ZXV10 W300 router, particularly with firmware version W300V1.0.0a_ZRD_LK, is susceptible to an access control vulnerability that allows remote attackers to gain unauthorized access to sensitive information. Specifically, the vulnerability exposes the PPPoE/PPPoA password through a direct request targeting the insecurely stored basic/tc2wanfun.js file, circumventing intended security measures and potentially compromising user credentials.