Description
ZyXEL Prestige 642R and 642R-I routers do not filter the routers' Telnet and FTP ports on the external WAN interface from inside access, allowing someone on an internal computer to reconfigure the router, if the password is known.
References
- 20010810 Re: ZyXEL Prestige 642R: Exposed Admin Services on WAN with Default Password mailing-list
- prestige-wan-bypass-filter(7146) vdb-entry
- 20010809 ZyXEL Prestige 642R: Exposed Admin Services on WAN with Default Password mailing-list
- 20010918 SECURITY RISK: ZyXEL ADSL Router 642R - WAN filter bypass from internal network mailing-list
- 3346 vdb-entry
- 20010814 Fwd: ZyXEL Prestige 642 Router Administration Interface Vulnerability mailing-list