PT-2014-3583 · Zyxel · Zyxel Wireless N300 Netusb Nbg-419N

Publicado 2014-04-15 · Atualizado 2014-04-15 · CVE-2014-0354

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:A/AC:L/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions ZyXEL Wireless N300 NetUSB NBG-419N router version 1.00(BFQ.6)C0

Description The issue allows remote attackers to obtain login access to index.asp via an HTTP request, due to a hardcoded password qweasdzxc for an unspecified account.

Recommendations For ZyXEL Wireless N300 NetUSB NBG-419N router version 1.00(BFQ.6)C0, consider changing the hardcoded password qweasdzxc to a unique and secure password to prevent unauthorized access. As a temporary workaround, restrict access to the index.asp page until a patch is available.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2014-0354

Produtos afetados

Zyxel Wireless N300 Netusb Nbg-419N

Referências · 2

• http://kb.cert.org/vuls/id/939260 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-0354 · Nota de Segurança