Cross-Site Request Forgery in ZyXEL P-330W Router Management Interface

CVE-2007-6730

Summary

The ZyXEL P-330W router has multiple vulnerabilities within its web management interface that expose it to cross-site request forgery (CSRF) attacks. This allows an attacker to execute unauthorized actions by hijacking the authentication of a router's administrator. Specifically, attackers can enable remote management features or alter the administrator password, potentially compromising the router's security. It is crucial for users to investigate these vulnerabilities and apply appropriate security measures to protect their devices.

References