PT-2005-1406 · Zyxel+1 · Zyxel P314+4

Jens Kalvik · Publicado 2005-02-10 · Atualizado 2017-07-11 · CVE-2005-0328

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Zyxel P310, P314, P324 versions (affected versions not specified) Netgear RT311, RT314 versions (affected versions not specified)

Description The issue allows remote attackers on the WAN to obtain the IP address of the LAN side interface by pinging a valid LAN IP address. This action generates an ARP reply from the WAN address side that maps the LAN IP address to the WAN's MAC address.

Recommendations For Zyxel P310, P314, P324, consider restricting access to the WAN interface to minimize the risk of exploitation. For Netgear RT311, RT314, avoid using the WAN interface for sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-0328

Produtos afetados

Netgear Rt311

Netgear Rt314

Zyxel P310

Zyxel P314

Zyxel P324

Referências · 3

• https://exchange.xforce.ibmcloud.com/vulnerabilities/20609 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0328 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=110720465527599&w=2 · Nota