CVE-2014-4154: ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with...

Security readout for executives and security teams

This issue can expose an internet connection password stored by a ZTE ZXV10 W300 router. If an affected device is reachable by attackers, they may be able to retrieve PPPoE or PPPoA credentials without proper access control. The sources do not name an official patch or confirm active exploitation. Exposure is likely limited to ZTE ZXV10 W300 routers running firmware W300V1.0.0a_ZRD_LK, especially where the web management interface is reachable from untrusted networks. Prioritize if these legacy routers are still deployed or remotely reachable. The business risk is credential disclosure that can disrupt connectivity or enable account misuse. If unsupported, replacement is the safest path. Mitigation focus: Inventory ZTE ZXV10 W300 devices and confirm firmware versions.; Check ZTE or ISP guidance for firmware updates or replacement options.; Disable remote web management where not required..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.