CVE-2014-4018: The ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK has a default password of admin for the admin ac...

Security readout for executives and security teams

This CVE describes a ZTE ZXV10 W300 router firmware build where the admin account uses the default password "admin". If that password is unchanged, an attacker who can reach the management interface may gain administrative access and alter router settings. Exposure is most likely where legacy ZTE ZXV10 W300 routers remain deployed with default credentials, especially if administration is reachable from the internet or other untrusted networks. Treat as a targeted legacy-device hygiene issue. Prioritize any internet-exposed or business-critical routers because administrative compromise can disrupt connectivity, redirect traffic, or weaken perimeter controls. Mitigation focus: Change the admin password from the documented default immediately.; Restrict router administration to trusted internal management networks.; Check ZTE or service-provider guidance for firmware updates or replacement advice..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.