ID
VAR-200903-0568
TITLE
ZyXEL G570S special HTTP request multiple security vulnerabilities
Trust: 0.6
DESCRIPTION
The ZyXEL G-570S is a versatile wireless router for home and small office use. The web server embedded in the ZyXEL G-570S router does not correctly handle HTTP requests. A remote attacker can send a specially crafted HTTP request containing a long parameter or a missing header to the device, causing a denial of service or changing the configuration of the host name. You can also get the configuration file by visiting /cgi-bin/ExportCurrentSettings?exportsetting=1. ZyXEL G570S is prone to multiple vulnerabilities, including security-bypass, denial-of-service, and information-disclosure issues. Attackers can exploit these issues to bypass certain security restrictions, cause a denial-of-service condition, or obtain sensitive information
Trust: 0.81
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | zyxel | model: | g570s 2 v1.00 b4 | scope: | - | version: | - | Trust: 0.6 |
| vendor: | zyxel | model: | g570s | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | zyxel | model: | g570s 2 v1.00 b4 | scope: | ne | version: | - | Trust: 0.3 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||
|
|
THREAT TYPE
network
Trust: 0.3
TYPE
Unknown
Trust: 0.3
EXTERNAL IDS
| db: | BID | id: | 34221 | Trust: 0.9 |
| db: | CNVD | id: | CNVD-2009-1733 | Trust: 0.6 |
REFERENCES
| url: | http://www.zyxel.com/web/product_family_detail.php?pc1indexflag=20040520161256&categorygroupno=13e013e3-f6f7-4c3c-8c70-ff2aa3a0c118 | Trust: 0.3 |
CREDITS
Michael Schratt
Trust: 0.3
SOURCES
| db: | CNVD | id: | CNVD-2009-1733 |
| db: | BID | id: | 34221 |
LAST UPDATE DATE
2022-05-17T02:02:49.702000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2009-1733 | date: | 2009-03-23T00:00:00 |
| db: | BID | id: | 34221 | date: | 2009-03-24T13:06:00 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2009-1733 | date: | 2009-03-23T00:00:00 |
| db: | BID | id: | 34221 | date: | 2009-03-23T00:00:00 |