{"cvss":0.0,"datePublished":"2015-03-28T00:00:00Z","dateUpdated":"2015-03-28T00:00:00Z","description":"ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficient access control, which allows remote attackers to read backup files via a direct request for rom-0.","dueDate":"","id":"CVE-2014-4019","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"zxv10_w300_firmware","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"ZTE zxv10_w300_firmware Exposure of Sensitive Information to an Unauthorized Actor","vendor":"ZTE"}