ZYXEL 3 Prestige Router - HTTP Remote Administration Configuration Reset
Author: Francisco Canela
type: remote
platform: hardware
port:
date_added: 2004-11-22
date_updated: 2013-03-13
verified: 1
codes: CVE-2004-1540;OSVDB-12108
tags:
aliases:
screenshot_url:
application_url:
source: https://www.securityfocus.com/bid/11723/info
ZyXEL Prestige router series is reported prone to an access validation vulnerability. The vulnerability exists because the firmware of the router fails to restrict access to a configuration page that is a part of the ZyXEL Prestige HTTP based remote administration service.
A remote attacker may exploit this vulnerability to reset the configuration of the router.
http://www.example.com/rpFWUpload.html