Weak Authentication in ZyXEL Wireless N300 Router Exposes Users to Remote Attacks

CVE-2014-0354

Summary

A security flaw exists in the ZyXEL Wireless N300 NetUSB NBG-419N router, where a hardcoded password can be exploited by remote attackers. This vulnerability allows unauthorized users to acquire login access via an HTTP request targeting the index.asp page. Users of the affected firmware version should update their devices to mitigate risks associated with this weakness.

References