Deviceways

Router

ZTE ZXHN H108N

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
v1 · Broadcom BCM43225 Wi-Fi
Processor: Broadcom BCM63281 · Processor: Broadcom BCM63281Open device guide Open hardware record
v1
Open hardware record
Original project github.com

v1 · Broadcom BCM43225 Wi-Fi

Limitations
DSL modem USB
First installation
CFE web recovery
Limitations
DSL modem
Limitations
USB
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

zte zxhn h108n v1 — device documentation (github.com)

Hardware revision
v1

Device details

ZTE ZXHN H108N v1 — TechInfoDepot (github.com)Device details — Source documentation (openwrt.org)

Hardware revision
v1

Device details

ZTE ZXHN H108N v2 — TechInfoDepot (github.com)

Hardware revision
v2.5

Device details

ZTE ZXHN H108N v2 — WikiDevi (github.com)

Hardware revision
v2.5

OpenWrt · v1 · Broadcom BCM43225 Wi-Fi

OpenWrt · v1 · Broadcom BCM43225 Wi-Fi — Source documentation (openwrt.org)

Installation routes recorded
CFE web recovery
Recovery routes recorded
CFE web recovery
Availability recorded by source
Discontinued

Hardware differences

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

ZXHN H168N,ZXHN H108N

Some ZTE products have CSRF vulnerability

CVE-2021-21729

Affected firmware
V3.5.0_EG1T5_TE V2.5.5_BTMT1
Fix
Fix details in the linked record
Read zte CVE record
Details and sources
CVE updated

Some ZTE products have CSRF vulnerability. Because some pages lack CSRF random value verification, attackers could perform illegal authorization operations by constructing messages.This affects: ZXHN H168N V3.5.0_EG1T5_TE, V2.5.5, ZXHN H108N V2.5.5_BTMT1

CVE published

ZXHN H108N

All versions up to V2.5.0_EG1T5_TED of ZTE ZXHN H108N product are impacted by an information leak vulnerability

CVE-2019-3420

Affected firmware
V2.5.0_EG1T5_TED
Fix
Fix details in the linked record
Read zte CVE record
Details and sources
CVE updated

All versions up to V2.5.0_EG1T5_TED of ZTE ZXHN H108N product are impacted by an information leak vulnerability. An attacker could exploit the vulnerability to obtain sensitive information and perform unauthorized operations.

CVE published

ZTE ZXHN H108N

ZTE OX-330P, ZXHN H108N, W300V1.0.0S_ZRD_TR1_D68, HG110, GAN9.8T101A-B, MF28G, ZXHN H108N use non-unique X.509 certificates and SSH host keys, which might allow remote attackers to…

CVE-2015-7255

Affected firmware
Version details in source scope
Fix
Fix details in the linked record
Read certcc CVE record
Details and sources
Public disclosure CVE updated

ZTE OX-330P, ZXHN H108N, W300V1.0.0S_ZRD_TR1_D68, HG110, GAN9.8T101A-B, MF28G, ZXHN H108N use non-unique X.509 certificates and SSH host keys, which might allow remote attackers to obtain credentials or other sensitive information via a man-in-the-middle attack, passive decryption attack, or impersonating a legitimate device.

CVE published

ZTE ZXHN H108N

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE and ZXV10 W300 devices W300V1.0.0f_ER1_PE allow remote authenticated users to bypass intended access restrictions, and…

CVE-2015-8703

Affected firmware
Version details in source scope
Fix
Fix details in the linked record
Read certcc CVE record
Details and sources
Public disclosure CVE updated

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE and ZXV10 W300 devices W300V1.0.0f_ER1_PE allow remote authenticated users to bypass intended access restrictions, and discover credentials and keys, by reading the configuration file, a different vulnerability than CVE-2015-7248.

VU#391604 — ZTE ZXHN H108N (kb.cert.org) ↗
CVE published

ZTE ZXHN H108N

Cross-site scripting (XSS) vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attackers to inject arbitrary web script or HTML…

CVE-2015-7252

Affected firmware
Version details in source scope
Fix
Fix details in the linked record
Read certcc CVE record
Details and sources
Public disclosure CVE updated

Cross-site scripting (XSS) vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attackers to inject arbitrary web script or HTML via the errorpage parameter.

VU#391604 — ZTE ZXHN H108N (kb.cert.org) ↗38773 — ZTE ZXHN H108N (exploit-db.com) ↗
Check more security advisories for this device · CVE.org