CVE-2015-7251

Critical

Published: 30/12/2015(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE have a hardcoded password of 'root' for the root account, allowing remote attackers to gain administrative access via a TELNET session.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the system, posing a serious threat to the security of data and organizational infrastructure.

Recommendation

It is recommended to update the devices to the latest firmware version to remove the hardcoded password and to disable TELNET access.

Original NVD description (English source)

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE have a hardcoded password of root for the root account, which allows remote attackers to obtain administrative access via a TELNET session.