{"api_version":"1","generated_at":"2026-07-23T06:10:59+00:00","cve":"CVE-2004-2637","urls":{"html":"https://cve.report/CVE-2004-2637","api":"https://cve.report/api/cve/CVE-2004-2637.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2004-2637","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2004-2637"},"summary":{"title":"CVE-2004-2637","description":"The NAT implementation in Zonet ZSR1104WE Wireless Router Runtime Code Version 2.41 converts IP addresses of inbound connections to the IP address of the router, which allows remote attackers to bypass intended security restrictions.","state":"PUBLISHED","assigner":"mitre","published_at":"2004-12-31 05:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.4","severity":"","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://marc.info/?l=full-disclosure&m=108324905314026&w=2","name":"http://marc.info/?l=full-disclosure&m=108324905314026&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"'[Full-Disclosure] Zonet ZSR1104WE Router problem' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1009967","name":"http://securitytracker.com/id?1009967","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Zonet Wireless Router NAT Function Modifies Inbound IP Source Addresses - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16005","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16005","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/11499","name":"http://secunia.com/advisories/11499","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Secunia - Advisories - Zonet ZSR1104WE Wireless Router NAT Implementation Weakness","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/5716","name":"http://www.osvdb.org/5716","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.securityfocus.com/bid/10225","name":"http://www.securityfocus.com/bid/10225","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Zonet Wireless Router NAT Implementation Design Flaw Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2004-2637","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-2637","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2004","cve_id":"2637","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"zonet","cpe5":"zsr1104we_wireless_router_runtime_code","cpe6":"2.41","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-08T01:36:24.587Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"10225","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/10225"},{"name":"zonet-bypass-security(16005)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16005"},{"name":"1009967","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1009967"},{"name":"5716","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/5716"},{"name":"11499","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/11499"},{"name":"20040429 Zonet ZSR1104WE Router problem","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"],"url":"http://marc.info/?l=full-disclosure&m=108324905314026&w=2"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2004-04-29T00:00:00.000Z","descriptions":[{"lang":"en","value":"The NAT implementation in Zonet ZSR1104WE Wireless Router Runtime Code Version 2.41 converts IP addresses of inbound connections to the IP address of the router, which allows remote attackers to bypass intended security restrictions."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-19T15:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"10225","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/10225"},{"name":"zonet-bypass-security(16005)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16005"},{"name":"1009967","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1009967"},{"name":"5716","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/5716"},{"name":"11499","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/11499"},{"name":"20040429 Zonet ZSR1104WE Router problem","tags":["mailing-list","x_refsource_FULLDISC"],"url":"http://marc.info/?l=full-disclosure&m=108324905314026&w=2"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2004-2637","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The NAT implementation in Zonet ZSR1104WE Wireless Router Runtime Code Version 2.41 converts IP addresses of inbound connections to the IP address of the router, which allows remote attackers to bypass intended security restrictions."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"10225","refsource":"BID","url":"http://www.securityfocus.com/bid/10225"},{"name":"zonet-bypass-security(16005)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16005"},{"name":"1009967","refsource":"SECTRACK","url":"http://securitytracker.com/id?1009967"},{"name":"5716","refsource":"OSVDB","url":"http://www.osvdb.org/5716"},{"name":"11499","refsource":"SECUNIA","url":"http://secunia.com/advisories/11499"},{"name":"20040429 Zonet ZSR1104WE Router problem","refsource":"FULLDISC","url":"http://marc.info/?l=full-disclosure&m=108324905314026&w=2"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2004-2637","datePublished":"2005-12-04T22:00:00.000Z","dateReserved":"2005-12-04T00:00:00.000Z","dateUpdated":"2024-08-08T01:36:24.587Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2004-12-31 05:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zonet:zsr1104we_wireless_router_runtime_code:2.41:*:*:*:*:*:*:*","matchCriteriaId":"89A945F3-FD13-43B1-8C04-6608927B9D3B"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2004","CveId":"2637","Ordinal":"1","Title":"CVE-2004-2637","CVE":"CVE-2004-2637","Year":"2004"},"notes":[{"CveYear":"2004","CveId":"2637","Ordinal":"1","NoteData":"The NAT implementation in Zonet ZSR1104WE Wireless Router Runtime Code Version 2.41 converts IP addresses of inbound connections to the IP address of the router, which allows remote attackers to bypass intended security restrictions.","Type":"Description","Title":"CVE-2004-2637"},{"CveYear":"2004","CveId":"2637","Ordinal":"2","NoteData":"2005-12-04","Type":"Other","Title":"Published"},{"CveYear":"2004","CveId":"2637","Ordinal":"3","NoteData":"2017-07-19","Type":"Other","Title":"Modified"}]}}}