ZTE ZXHN H298A and H108N Sensitive Data Exposure Vulnerability Allowing Credential Leakage

A vulnerability in the ZTE ZXHN H298A version 1.1 and H108N version 2.6 routers allows for sensitive data exposure through the web interface. This issue enables an unauthenticated user to access administrative credentials and Wi-Fi-related secrets, such as the WLAN Pre-Shared Key. The exposed information can lead to unauthorized access and compromise of the router's Wi-Fi credentials. In some affected firmware versions, only partial identifiers like the serial number, ESSID, and MAC addresses may be exposed instead of full credentials.

Impact

The vulnerability allows for information disclosure, authentication bypass, and unauthorized administrative access on the affected routers.