Remote Administration Vulnerability in ZyXEL Prestige Routers

CVE-2004-1540

What is CVE-2004-1540?

Certain ZyXEL Prestige HW Routers, such as models 623, 650, and 652, are prone to a vulnerability that allows unauthorized access to the router's remote administration feature. When HTTP Remote Administration is enabled, an attacker can interact with the 'rpFWUpload.html' page without authenticating, potentially allowing them to reset the router's configuration file. This issue poses a serious risk to network integrity and user data, as it can lead to unauthorized changes to router settings.

References