PT-2001-2277 · Zyxel · Zyxel Prestige

Published 2001-08-14 · Updated 2017-12-19 · CVE-2001-1135

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ZyXEL Prestige versions 642R and 642R-I

Description The issue allows someone on an internal computer to reconfigure the router if the password is known, as the routers' Telnet and FTP ports on the external WAN interface are not filtered from inside access.

Recommendations For ZyXEL Prestige 642R and 642R-I, restrict access to the Telnet and FTP ports on the external WAN interface from internal computers to minimize the risk of exploitation. As a temporary workaround, consider changing the password to prevent unauthorized reconfiguration of the router.

Fix

Related Identifiers

CVE-2001-1135

Affected Products

Zyxel Prestige

References · 7

• http://securityfocus.com/archive/1/204439 · Vendor Advisory
• http://securityfocus.com/bid/3346 · Vendor Advisory
• http://securityfocus.com/archive/1/214971 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1135 · Security Note
• http://securityfocus.com/archive/1/203022 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7146 · Note
• http://securityfocus.com/archive/1/203592 · Note