CVE-2015-7255: ZTE OX-330P, ZXHN H108N, W300V1.0.0S_ZRD_TR1_D68, HG110, GAN9.8T101A-B, MF28G, ZXHN H108N use non-unique X....

Security readout for executives and security teams

Some listed ZTE devices shipped with non-unique HTTPS certificates and SSH host keys. That means one device may cryptographically look like another, weakening trust in management sessions and creating risk of credential theft or impersonation if an attacker can intercept traffic. Exposure is most likely where the listed ZTE devices are still deployed, especially if management interfaces are reachable from untrusted networks or administrators connect over networks where interception is possible. Prioritize environments where these devices protect sensitive networks or are remotely administered. The issue is old and exploitation is unconfirmed here, but reused cryptographic identity can undermine trust in management access. Mitigation focus: Inventory environments for the listed ZTE device models.; Check current ZTE and CERT guidance before assuming a patch exists.; Replace device certificates and SSH host keys if supported..

Prepared

Jun 12, 2026, 21:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.