PT-2004-3527 · Zonet · Zonet Zsr1104We Wireless Router

Jason Wachtel · Published 2004-12-31 · Updated 2017-07-20 · CVE-2004-2637

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Zonet ZSR1104WE Wireless Router version 2.41

Description The issue concerns the NAT implementation in the router, which converts IP addresses of inbound connections to the IP address of the router. This allows remote attackers to bypass intended security restrictions.

Recommendations For version 2.41, consider restricting inbound connections to minimize the risk of exploitation until a patch is available.

Fix

Related Identifiers

CVE-2004-2637

Affected Products

Zonet Zsr1104We Wireless Router

References · 7

• http://secunia.com/advisories/11499 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-2637 · Security Note
• http://osvdb.org/5716 · Note
• http://securitytracker.com/id?1009967 · Note
• http://marc.info/?l=full-disclosure&m=108324905314026&w=2 · Note
• http://securityfocus.com/bid/10225 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16005 · Note