OSVDB ID: 12108 Title: ZyXEL Prestige rpFWUpload.html Unauthorized Reset |
Info |
|
|
Dates |
||||
|
|
Description |
Several ZyXEL Prestige devices contains a flaw that may allow a malicious user to reset the device to its default configuration. The issue is triggered when getting through the Web interface the rpFWUpload.html web page, which is not restricted, and then clicking on the reset button. It is possible that the flaw may allow the attacker to reset the device configuration resulting in a loss of integrity. |
Classification |
Location:
Remote/Network Access Required
Attack Type: Denial of Service Impact: Loss of Integrity Exploit: Exploit Available OSVDB: Web Related |
Solution |
Currently, there are no known upgrades, patches, or workarounds available to correct this issue. |
Products |
|
References |
|
Credit |
|
gmail.com -