Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:INFO-LEAK:ZYXEL-PRESTIGE |
|---|---|
Severity |
Warning |
Recommended |
No |
Category |
HTTP |
Keywords |
ZyXEL Prestige 650 HW Router Information Leak |
Release Date |
2005/03/07 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: ZyXEL Prestige 650 HW Router Information Leak
This signature detects attempts to access unprotected data on a ZyXEL Prestige 650 HW Router. Because the router firmware does not restrict access to a configuration page that is a part of the ZyXEL Prestige HTTP remote administration, attackers can remotely reset the router configuration.
Extended Description
ZyXEL Prestige router series is reported prone to an access validation vulnerability. The vulnerability exists because the firmware of the router fails to restrict access to a configuration page that is a part of the ZyXEL Prestige HTTP based remote administration service. A remote attacker may exploit this vulnerability to reset the configuration of the router.
Affected Products
- Zyxel prestige_645r-a1
- Zyxel prestige_650h
- Zyxel prestige_650hw
- Zyxel prestige_650hw-31
- Zyxel prestige_650r
- Zyxel zynos 3.40.0
- Zyxel zynos IS.3
- Zyxel zynos IS.5
- Zyxel zynos V3.40(ES.5)
References
- BugTraq: 11723
- CVE: CVE-2004-1540
- URL: http://www.zyxel.com/
- URL: http://www.securityfocus.com/archive/1/382231