CVE-2017-10930

Vulnerability

An improper access control vulnerability exists in ZTE ZXR10 1800-2S, 2800-4, 3800-8, and 160 devices running software versions prior to v3.00.40 [1]. The web interface does not properly restrict access to configuration file downloads, allowing any user—even without authentication—to retrieve sensitive device data [1].

Exploitation

An attacker with network access to the affected device's web interface can directly download configuration files without any authentication or user interaction [1]. The vulnerability is exploitable remotely over the network, requiring no special privileges or prior access [1].

Impact

Successful exploitation yields the device's configuration, which includes administrator account names and plaintext passwords [1]. This information can then be used to gain full administrative control over the router, leading to complete compromise of confidentiality, integrity, and availability [1].

Mitigation

ZTE released v3.00.40 to address this vulnerability [1]. Users should upgrade to v3.00.40 or later. As a workaround, disable the web configuration interface and manage the device exclusively through CLI commands [1].