Description
The management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device allows remote authenticated administrators to cause a denial of service (infinite reboot loop) via invalid configuration data. NOTE: this issue might not cross privilege boundaries, and it might be resultant from CSRF; if so, then it should not be included in CVE.
References
- http://www.louhi.fi/advisory/zyxel_070810.txt
- zywall-management-dos(35941) vdb-entry
- 42448 vdb-entry
- 20070810 Zyxel Zywall 2 multiple vulnerabilities mailing-list
- 3002 third-party-advisory
- 25262 vdb-entry