CVE-2025-53558

ZTE routers (ZXHN-F660T and ZXHN-F660A) come with the same default login credentials for all units. An attacker who knows these credentials can access and control any of these devices.

The affected ZTE router models use hardcoded or unchangeable default credentials across all installations, allowing unauthenticated remote attackers to gain administrative access via the management interface. This enables complete device compromise including configuration modification, traffic interception, and potential lateral network movement.