Read the docs
TI-2014-00315 Aliases CVE-2014-0329GHSA-cjwg-fm46-9qch

The TELNET service on the ZTE ZXV10 W300 router 2.1.0 has a hardcoded password ending…

Priority MEDIUM 51CWE-255Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
—
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

The TELNET service on the ZTE ZXV10 W300 router 2.1.0 has a hardcoded password ending with airocon for the admin account, which allows remote attackers to obtain administrative access by leveraging knowledge of the MAC address characters present at the beginning of the password.

Why it matters now

EPSS 0.08521 95th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:h:zte:zxv10_w300:2.1.0:*:*:*:*:*:*:*2.1.0VulnerableZTE
  • cpe:2.3:h:zte:zxv10_w300:2.1.0:*:*:*:*:*:*:* Versions 2.1.0 Vulnerable ·ZTE

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2014-0329
  2. 2026-10-03 Alias added: GHSA-cjwg-fm46-9qch
  3. 2026-10-19 EPSS moved to the 95th–99th percentile

References

Advisory 1

Other 3

  • TI-2020-10094 The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the… CVSS 3.1HIGH 7.5
  • TI-2014-03277 The ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK has a default password of… CVSS 2.0HIGH 7.8
  • TI-2014-03394 Cross-site request forgery (CSRF) vulnerability in the ZTE ZXV10 W300 router with… CVSS 2.0MEDIUM 6.8
  • TI-2014-03393 ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under… CVSS 2.0MEDIUM 5.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences