Security Advisory

CVE-2014-4019

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-02-20 17:27:39
Last updated 2024-08-06 11:04:27
Assigner mitre
State PUBLISHED

Description

ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficient access control, which allows remote attackers to read backup files via a direct request for rom-0.