HTTP: ZyXEL Prestige 650 HW Router Information Leak

This signature detects attempts to access unprotected data on a ZyXEL Prestige 650 HW Router. Because the router firmware does not restrict access to a configuration page that is a part of the ZyXEL Prestige HTTP remote administration, attackers can remotely reset the router configuration.

Extended Description

ZyXEL Prestige router series is reported prone to an access validation vulnerability. The vulnerability exists because the firmware of the router fails to restrict access to a configuration page that is a part of the ZyXEL Prestige HTTP based remote administration service. A remote attacker may exploit this vulnerability to reset the configuration of the router.

Affected Products

Zyxel zynos,Zyxel prestige_650r

References

BugTraq: 11723

CVE: CVE-2004-1540

URL: http://www.zyxel.com/ http://www.securityfocus.com/archive/1/382231

Short Name

HTTP:INFO-LEAK:ZYXEL-PRESTIGE

Severity

Warning

Recommended

False

Recommended Action

None

HTTP: ZyXEL Prestige 650 HW Router Information Leak

Extended Description

Affected Products

References

Found a potential security threat?