ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE have a hardcoded password of root for the root account, which allows remote attackers to obtain administrative access via a TELNET session. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 38.8%.
Zte
Authentication Bypass
Zxhn H108N R1A Firmware
NVD
Exploit-DB
CVSS 3.0
9.8
EPSS
38.8%
Threat
4.6
Corega CG-WLBARGS devices allow remote attackers to perform administrative operations via unspecified vectors. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Privilege Escalation
Cg Wlbargs Firmware
NVD
CVSS 3.0
9.8
EPSS
3.0%