PT-2014-3582 · Zyxel · Zyxel Nbg-419N

Publicado 2014-04-15 · Atualizado 2014-04-15 · CVE-2014-0353

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Média

Vetor base

AV:A/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions ZyXEL Wireless N300 NetUSB NBG-419N router version 1.00(BFQ.6)C0

Description The issue allows remote attackers to bypass authentication by using %2F sequences in place of / (slash) characters.

Recommendations For version 1.00(BFQ.6)C0, consider updating the firmware to a newer version that addresses this issue, if available. As a temporary workaround, restrict access to the router's web interface to minimize the risk of exploitation.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2014-0353

Produtos afetados

Zyxel Nbg-419N

Referências · 2

• http://kb.cert.org/vuls/id/939260 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-0353 · Nota de Segurança