PT-2001-2277 · Zyxel · Zyxel Prestige

Publicado 2001-08-14 · Atualizado 2017-12-19 · CVE-2001-1135

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ZyXEL Prestige versions 642R and 642R-I

Description The issue allows someone on an internal computer to reconfigure the router if the password is known, as the routers' Telnet and FTP ports on the external WAN interface are not filtered from inside access.

Recommendations For ZyXEL Prestige 642R and 642R-I, restrict access to the Telnet and FTP ports on the external WAN interface from internal computers to minimize the risk of exploitation. As a temporary workaround, consider changing the password to prevent unauthorized reconfiguration of the router.

Correção

Identificadores relacionados

CVE-2001-1135

Produtos afetados

Zyxel Prestige

Referências · 7

• http://securityfocus.com/archive/1/204439 · Aviso do Fabricante
• http://securityfocus.com/bid/3346 · Aviso do Fabricante
• http://securityfocus.com/archive/1/203022 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7146 · Nota
• http://securityfocus.com/archive/1/203592 · Nota
• http://securityfocus.com/archive/1/214971 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-1135 · Nota de Segurança