ZTE ZXV10 W300 Router
Approved changes feed: RSS · Atom
cpe:2.3:h:zte:zxv10_w300:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Zte (a03dfd9f-ec80-5d2d-8d2d-86a72c3ab055) |
|---|---|
| Product | Zxv10 W300 (f0e12d47-9288-5e91-b39a-9f5f6566598d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-12695 |
vulnerable | 2026-06-08 05:17:58.903453 |
Details available
The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue.
Published: 2020-06-08T16:45:04.000Z
Updated: 2024-08-04T12:04:22.578Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7259 |
not_vulnerable | 2026-06-08 05:07:00.259059 |
Details available
ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow user accounts to have multiple valid username and password pairs, which allows remote authenticated users to login to a target account via any of its username and password pairs.
Published: 2017-08-24T20:00:00.000Z
Updated: 2024-08-06T07:43:46.118Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7258 |
not_vulnerable | 2026-06-08 05:07:00.258626 |
Details available
ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated users to obtain user passwords by displaying user information in a Telnet connection.
Published: 2017-08-24T20:00:00.000Z
Updated: 2024-08-06T07:43:46.121Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7257 |
not_vulnerable | 2026-06-08 05:07:00.257348 |
Details available
ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated non-administrator users to change the admin password by intercepting an outgoing password change request, and changing the username parameter from "support" to "admin".
Published: 2017-08-24T20:00:00.000Z
Updated: 2024-08-06T07:43:46.116Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4155 |
vulnerable | 2026-06-08 05:05:44.295175 |
Details available
Cross-site request forgery (CSRF) vulnerability in the ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK allows remote attackers to hijack the authentication of administrators for requests that change the admin password via a request to Forms/tools_admin_1.
Published: 2014-06-19T14:00:00.000Z
Updated: 2024-08-06T11:04:28.734Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4154 |
vulnerable | 2026-06-08 05:05:44.294866 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4019 |
not_vulnerable | 2026-06-08 05:05:43.879638 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4018 |
vulnerable | 2026-06-08 05:05:43.877939 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.