Approved changes feed: RSS · Atom

cpe:2.3:o:zte:zxv10_w300_firmware:w300v2.1.0f_er7_pe_o57:*:*:*:*:*:*:*

part: o version: w300v2.1.0f_er7_pe_o57 update: *

VendorZte (a03dfd9f-ec80-5d2d-8d2d-86a72c3ab055)
ProductZxv10 W300 Firmware (67cfbd32-a4ec-598f-8c6a-828d2603189e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-7259 vulnerable 2026-06-08 05:07:00.259038 Details available
ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow user accounts to have multiple valid username and password pairs, which allows remote authenticated users to login to a target account via any of its username and password pairs.
Published: 2017-08-24T20:00:00.000Z
Updated: 2024-08-06T07:43:46.118Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7258 vulnerable 2026-06-08 05:07:00.258601 Details available
ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated users to obtain user passwords by displaying user information in a Telnet connection.
Published: 2017-08-24T20:00:00.000Z
Updated: 2024-08-06T07:43:46.121Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7257 vulnerable 2026-06-08 05:07:00.256484 Details available
ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated non-administrator users to change the admin password by intercepting an outgoing password change request, and changing the username parameter from "support" to "admin".
Published: 2017-08-24T20:00:00.000Z
Updated: 2024-08-06T07:43:46.116Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.