ZyXEL Prestige Router Remote Node Filtering Vulnerability

Bugtraq ID:	3162
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 09 2001 12:00AM
Updated:	Jan 09 2001 12:00AM
Credit:	Reported by Daniel Roethlisberger <[email protected]>
Vulnerable:	ZyXEL Prestige 642R-I ZyXEL Prestige 642R ZyXEL Prestige 202 ZyXEL Prestige 100
Not Vulnerable:	ZyXEL Prestige 642M-I ZyXEL Prestige 642M

ZyXEL Prestige Router Remote Node Filtering Vulnerability

ZyXEL Prestige routers allow up to four different remote node filtering rules to be applied.

When one remote node filtering rule is applied, the filter is effective. However, when more than one remote node filtering rule is applied, the first filtering rule is the only one that takes effect.

It has been reported that this issue still exists in firmware version V2.50(AL.2) of Prestige 642 routers. This has not been confirmed by the vendor.

ZyXEL Prestige Router Remote Node Filtering Vulnerability

Solution:
ZyXel has released a firmware update to fix this vulnerability for the Prestige 642 routers:
ftp://ftp.europe.zyxel.com/public/prestige/p642r-13/firmware/2.50(AL.1)

ftp://ftp.europe.zyxel.com/public/prestige/p642r-11/firmware/2.50(AJ.4)


ZyXEL Prestige 642R-I

• ZyXel 2.50(AL.1) Firmware
  ftp://ftp.europe.zyxel.com/public/prestige/p642r-13/firmware/2.50(AL.1 )

ZyXEL Prestige Router Remote Node Filtering Vulnerability

References:

• ZyXEL Total Internet Access Solution (ZyXEL)