QwikSec

Security Database

CVE

CWE

Training

CVE-2007-4317

Published: Aug 13, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device allow remote attackers to perform certain actions as administrators, as demonstrated by a request to Forms/General_1 with the (1) sysSystemName and (2) sysDomainName parameters.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.louhi.fi/advisory/zyxel_070810.txt

x_refsource_MISC

20070810 Zyxel Zywall 2 multiple vulnerabilities

mailing-list

x_refsource_BUGTRAQ

vdb-entry

x_refsource_OSVDB

third-party-advisory

x_refsource_SREASON

third-party-advisory

x_refsource_SECUNIA

zywall-management-csrf(35913)

vdb-entry

x_refsource_XF

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.