PT-2004-2448 · Zyxel · Zyxel Prestige

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-1540

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ZyXEL Prestige versions 623, 650, and 652

Description The issue allows remote attackers to reset the router configuration file without a password when HTTP Remote Administration is enabled. This is due to the lack of password requirement to access the rpFWUpload.html file.

Recommendations For versions 623, 650, and 652, consider disabling HTTP Remote Administration until a fix is available to prevent unauthorized access to the router configuration.

Exploit

Fix

Related Identifiers

CVE-2004-1540

Affected Products

Zyxel Prestige

References · 9

• 🔥 http://securitytracker.com/id?1012298 · Exploit
• 🔥 https://exploit-db.com/exploits/24760 · Exploit
• 🔥 http://securityfocus.com/bid/11723 · Exploit
• http://secunia.com/advisories/13278 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-1540 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18202 · Note
• http://marc.info/?l=bugtraq&m=110135136811344&w=2 · Note
• http://osvdb.org/12108 · Note
• http://marc.info/?l=bugtraq&m=110116413414615&w=2 · Note