Security Advisory
CVE-2014-4154
5
Vulnerability Description
ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the PPPoE/PPPoA password via a direct request for basic/tc2wanfun.js.
Published Date
July 16, 2014
Official Source
NIST NVD Advisory