Lucene search
HistoryDec 04, 2005 - 10:00 p.m.
CVE-2004-2637
cve-2004-2637
nat implementation
zonet zsr1104we
wireless router
security bypass
ip address conversion
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.047 Low
EPSS
Percentile
92.7%
The NAT implementation in Zonet ZSR1104WE Wireless Router Runtime Code Version 2.41 converts IP addresses of inbound connections to the IP address of the router, which allows remote attackers to bypass intended security restrictions.
Affected configurations
Node
zonetzsr1104we_wireless_router_runtime_codeMatch2.41
| CPE | Name | Operator | Version |
|---|---|---|---|
| zonet:zsr1104we_wireless_router_runtime_code | zonet zsr1104we wireless router runtime code | eq | 2.41 |
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.047 Low
EPSS
Percentile
92.7%
Related for CVE-2004-2637