CVE-2007-6730 Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in the ZyXEL P-330W router allow remote attackers to hijack the authentication of administrators for requests...
HighCVSS 9.3
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in the ZyXEL P-330W router allow remote attackers to hijack the authentication of administrators for requests that (1) enable remote router management via goform/formRmtMgt or (2) modify the administrator password via goform/formPasswordSetup.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zyxel p-330w router | All versions | No fix listed |
References
- 20071225 Ho Ho H0-Day - ZyXEL P-330W multiple XSS and XSRF vulnerabilities exploit mailing-list
- 28172 third-party-advisory vendor-advisory
- 27024 vdb-entry