This is the most relevant recent academic work regarding router wordlists.
Some ZTE routers generate a password based on the last 6 digits of the MAC address or Serial Number (S/N). Tools like zte_cred (GitHub) can calculate the unique default Wi-Fi key, which is often the same as the admin password.
A wordlist, in cybersecurity terms, is a text file containing potential passwords — one per line. A “ZTE router wordlist” specifically contains default passwords generated by ZTE routers, often derived from the router’s MAC address or SSID.
Instead of brute‑forcing every possible character combination (which would take years), an attacker can use this wordlist to try only the passwords that ZTE’s algorithm is likely to produce. zte router wordlist
These are the first entries any ZTE wordlist should contain.
| Username | Password | Model Applicability |
| :--- | :--- | :--- |
| admin | admin | ZXHN H108N, H298A, F660 |
| admin | password | Early ZTE modems |
| user | user | User-level access (read-only) |
| root | Zte521 | Critical backdoor for Linux-based ZTE |
| admin | 1234 | Old ADSL models |
While papers explain the theory, for practical auditing (with authorization), you need the specific strings. Research shows ZTE devices frequently use high-entropy default passwords printed on stickers, but also static default credentials for engineering accounts. This is the most relevant recent academic work
Common credentials identified in these papers and public disclosures for ZTE routers include:
Standard Admin Accounts:
ISP-Specific Defaults (Often used by ZTE for Telcos): Some ZTE routers generate a password based on
Hidden/Engineering Accounts (Disclosed in Security Advisories):
Many users never change their router’s default Wi-Fi password. If an attacker knows the SSID (which is broadcast publicly), they can:
From there, they could change DNS settings, intercept traffic, or pivot to other devices on the network.
If you are writing a literature review or need technical background on why ZTE routers are vulnerable to wordlist attacks, refer to these: