This vulnerability involves the exposure of initial login credentials through unencrypted information accessible in the firmware of the ZTE F689 device. An attacker with network access can retrieve these credentials without authentication, potentially gaining unauthorized access to the device's web interface. The vulnerability is classified under CWE-798 (Use of Hard-coded Credentials). The CVSS v3.1 base score is 7.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and high confidentiality impact.

An attacker can obtain the initial login credentials for the device's web interface by accessing unencrypted firmware data. This compromises the confidentiality of the device's administrative access but does not affect integrity or availability. Unauthorized access could allow further malicious actions depending on the device's configuration and protections.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround is currently documented. Users should monitor ZTE advisories for updates and consider restricting network access to the device's management interface until a fix is available.