Descripción
Unauthenticated credential disclosure in the wizard interface in ZTE ZXHN H188A V6.0.10P2_TE and V6.0.10P3N3_TE allows unauthenticated attackers on the local network to retrieve sensitive credentials from the router-s web management interface, including the default administrator password, WLAN PSK, and PPPoE credentials. In some observed cases, configuration changes may also be performed without authentication.
CVSS 7.1EPSS 8.943%Riesgo 1.28
Ver fuente- Publicación
- 2026-03-30 16:16:07
- Versiones afectadas
- cannotmatch
- Tipo
- Firmware
- Vector
- CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N