Description
ZyXEL Prestige 623, 650, and 652 HW Routers, and possibly other versions, with HTTP Remote Administration enabled, does not require a password to access rpFWUpload.html, which allows remote attackers to reset the router configuration file.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- ZYXEL 3 Prestige Router - HTTP Remote Administration Configuration Reset EDB-24760 · remote · Nov 22, 2004 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 20041121 Router ZyXEL Prestige 650 HW http remote admin. mailing-list
- 12108 vdb-entry
- 11723 vdb-entry
- 13278 third-party-advisory
- zyxel-configuration-reset(18202) vdb-entry
- 20041124 Re: Router ZyXEL Prestige 650 HW http remote admin. mailing-list
- 1012298 vdb-entry