ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the PPPoE/PPPoA password via a direct request for basic/tc2wanfun.js.
This public preview summarizes the normalized record without exposing paid citation paths. Use it to decide whether the device deserves a paid report, workspace review, or direct source verification.
Public pages show source names and record counts. Paid reports unlock source URLs, citation paths, and report-generation context.
For records that need deeper review, use the main access flow to request source-backed report context, saved workspace review, or support before relying on the public preview.
Security records are triage intelligence and should be validated against asset inventory, firmware versions, compensating controls, and vendor advisories.
Prioritize known exploited and high-confidence records.
Check support and vulnerability signals before purchase.
Use reports and monitors for customer device review.
Paid reports include citation paths and report-generation context; public previews intentionally hide source URLs.