| Title | ZLT M30S & M30S PRO MTNNGRM30S_1.47, M30SPRO_3.09.06 (Other versions might be vulnerable) Backdoor Credentials |
|---|
| Description | A hard coded credential pair (guest:123456) grants full administrative privileges on the affected web interface of the mobile router. Although the interface initially displays a non-functional password change page with no menus, all administrative actions remain accessible when invoked directly. Page identifiers can also be referenced, bypassing the intended UI restrictions, effectively providing unrestricted administrative access to the system. |
|---|
| Source | ⚠️ https://youtu.be/o8rfjSlpRxY |
|---|
| User | S33K3R (UID 92688) |
|---|
| Submission | 11/18/2025 17:59 (9 months ago) |
|---|
| Moderation | 12/05/2025 17:58 (17 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 334521 [TOZED ZLT M30S/ZLT M30S PRO 1.47/3.09.06 Web Interface hard-coded credentials] |
|---|
| Points | 17 |
|---|