CVE-2014-4019: ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with...

Security readout for executives and security teams

This CVE affects a specific ZTE ZXV10 W300 router firmware and exposes sensitive backup information from the web interface without enough access control. If the router is reachable, an outside attacker may be able to read protected configuration data. The sources do not provide a CVSS score, confirmed active exploitation, or a vendor fix. Exposure is most likely where the named ZTE ZXV10 W300 firmware is still deployed and its web management interface is reachable from untrusted networks. The provided affected-product metadata is incomplete, so asset confirmation is required. Prioritize affected internet-facing routers because the issue can expose sensitive configuration data remotely. If devices are internal-only and unsupported, reduce reachability first, then plan replacement or vendor-guided remediation. Mitigation focus: Identify any ZTE ZXV10 W300 routers and firmware W300V1.0.0a_ZRD_LK.; Restrict router management interfaces to trusted administrative networks only.; Check ZTE or service-provider guidance for patched firmware or replacement advice..

Prepared

Jun 6, 2026, 02:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.