DNS SOHO Router Pharming Attack Takes 300,000 Routers

More than 300,000 small office and home office routers, most in Europe and Asia, were compromised in a campaign that started in mid-December, continuing a rash of security incidents involving home and small business networking equipment. Researchers at Team Cymru published a report today on the...

[ZynOS-Attacker] (TP-LINK TD-W8951ND Router) Tool for automated attack on a range of IP

With these scripts you can attack ZynOS routers and modify/extract anything you want on the target router from extracting ISP username and password to injecting rogue DNS servers IPs. Download ZynOS-Attacker...

Cross site scripting

The management interface in ZyNOS firmware 3.62WK.6 on the Zyxel Zywall 2 device allows remote authenticated administrators to cause a denial of service infinite reboot loop via invalid configuration data. NOTE: this issue might not cross privilege boundaries, and it might be resultant from CSRF;...

CVE-2007-4316

The management interface in ZyNOS firmware 3.62WK.6 on the Zyxel Zywall 2 device has a certain default password, which allows remote attackers to perform administrative actions...

Cross site scripting

Cross-site scripting XSS vulnerability in Forms/General1 in the management interface in ZyNOS firmware 3.62WK.6 on the Zyxel Zywall 2 device allows remote authenticated administrators to inject arbitrary web script or HTML via the sysSystemName parameter...

CVE-2007-4318

Cross-site scripting XSS vulnerability in Forms/General1 in the management interface in ZyNOS firmware 3.62WK.6 on the Zyxel Zywall 2 device allows remote authenticated administrators to inject arbitrary web script or HTML via the sysSystemName parameter...

Default credentials

The management interface in ZyNOS firmware 3.62WK.6 on the Zyxel Zywall 2 device has a certain default password, which allows remote attackers to perform administrative actions...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the management interface in ZyNOS firmware 3.62WK.6 on the Zyxel Zywall 2 device allow remote attackers to perform certain actions as administrators, as demonstrated by a request to Forms/General1 with the 1 sysSystemName and 2...

CVE-2007-4319

The management interface in ZyNOS firmware 3.62WK.6 on the Zyxel Zywall 2 device allows remote authenticated administrators to cause a denial of service infinite reboot loop via invalid configuration data. NOTE: this issue might not cross privilege boundaries, and it might be resultant from CSRF;...

CVE-2007-4317

CVE-2007-4317 describes multiple CSRF vulnerabilities in the management interface of ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device. The issues allow remote attackers to perform administrator actions, demonstrated via a request to Forms/General_1 using the (1) sysSystemName and (2) sysDom...

CVE-2007-4319

The management interface in ZyNOS firmware 3.62WK.6 on the Zyxel Zywall 2 device allows remote authenticated administrators to cause a denial of service infinite reboot loop via invalid configuration data. NOTE: this issue might not cross privilege boundaries, and it might be resultant from CSRF;...

CVE-2007-4318

CVE-2007-4318 is a cross-site scripting (XSS) vulnerability in the Zyxel Zywall 2 device running ZyNOS firmware 3.62(WK.6). The issue affects the management interface (Forms/General_1) where the sysSystemName parameter can be manipulated by remote authenticated administrators to inject arbitrary ...

Zyxel Router Zynos SMB数据处理拒绝服务漏洞

Zyxel Router是一款ADSL路由器。 Zyxel Router不正确处理SMB报文，远程攻击者可以利用漏洞对设备进行拒绝服务攻击。 发送包含srSMBMailSlotname="\M"数据的报文，可导致设备崩溃，停止响应。 ZyXEL ZyNOS 3.40 目前没有详细解决方案提供： http://www.zyxel.com...

Design/Logic Flaw

ZynOS 3.40 allows remote attackers to cause a denial of service link restart by sending a request for the name \M via the SMB Mail Slot Protocol...

CVE-2007-1586

ZynOS 3.40 allows remote attackers to cause a denial of service link restart by sending a request for the name \M via the SMB Mail Slot Protocol...

CVE-2007-1586

ZynOS 3.40 allows remote attackers to cause a denial of service link restart by sending a request for the name \M via the SMB Mail Slot Protocol...

CVE-2007-1586

CVE-2007-1586 affects ZynOS 3.40. A remote attacker can trigger a denial of service (link restart) by sending a request for the name \M over the SMB Mail Slot Protocol. The NVD entry assigns a CVSS v2 base score of 7.8 (HIGH) with network access, low attack complexity, and availability impact. No...

ZYXEL Router 3.40 Zynos - SMB Data Handling Denial of Service

ZYXEL Router 3.40 Zynos - SMB Data Handling Denial of Service source: https://www.securityfocus.com/bid/23061/info Zyxel Routers running the ZynOS operating system are prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to crash the affected device, denying furth...

ZYXEL Router 3.40 Zynos - SMB Data Handling Denial of Service

source: https://www.securityfocus.com/bid/23061/info Zyxel Routers running the ZynOS operating system are prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to crash the affected device, denying further network service to legitimate users. This issue affects Zyx...

Zyxel660H-61.txt

Zyxel Prestige 660H-61 Cross-Site Scripting Tested on Zyxel Prestige 660H-61 ZyNOS F/W Version: V3.40PT.0b32 | 1/28/2005 Standard:NORMAL Discovered by: José Ramón Palanco: jose.palancoateazeldot.es http://www.eazel.es Description: Zyxel Prestige 660H-61 ADSL Router is vulnerable to a security...