Published: 16/06/2014 Updated: 17/07/2014

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 685

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Multiple cross-site request forgery (CSRF) vulnerabilities in the Zyxel P-660HW-T1 (v3) wireless router allow remote malicious users to hijack the authentication of administrators for requests that change the (1) wifi password or (2) SSID via a request to Forms/WLAN_General_1.

Vulnerable Product	Search on Vulmon	Subscribe to Product
zyxel p-660hw _t1

# Exploit Title: Zyxel P-660HW-T1 v3 Wireless Router - CSRF Vulnerabilities # Date: 05/22/2014 # Author: Mustafa ALTINKAYNAK # Vendor Homepage:wwwzyxelcom/tr/tr/products_services/p_660hw_seriesshtml?t=p # Category: Hardware/Wireless Router # Tested on: Zyxel P-660HW-T1 v3 Wireless Router # Patch/ Fix: Vendor has not provided any fix for t ...

CWE-352 http://www.exploit-db.com/exploits/33518 http://packetstormsecurity.com/files/126812/Zyxel-P-660HW-T1-Cross-Site-Request-Forgery.html http://secunia.com/advisories/58513 http://osvdb.org/show/osvdb/107449 https://nvd.nist.gov https://www.exploit-db.com/exploits/33518/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2014-4162

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect