ZyXEL ZyWALL 10 Management Interface Cross-Site Scripting Vulnerability

Bugtraq ID:	9373
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 06 2004 12:00AM
Updated:	Jan 06 2004 12:00AM
Credit:	Discovery is credited to Rafel Ivgi.
Vulnerable:	ZyXEL Zywall10 4.0 7 ZyXEL Zywall10 3.50 (WA.2) ZyXEL Zywall10 3.50 (WA.1) ZyXEL Zywall10 3.24 (WA.2) ZyXEL Zywall10 3.24 (WA.1) ZyXEL Zywall10 3.24 (WA.0) ZyXEL Zywall10 3.20 (WA.1) ZyXEL Zywall10 3.20 (WA.0)
Not Vulnerable:

ZyXEL ZyWALL 10 Management Interface Cross-Site Scripting Vulnerability

ZyWALL 10 firewalls are prone to cross-site scripting attacks via the web management interface of affected devices. An attacker could exploit this issue by enticing a victim user to follow a malicious link to a site hosting the software that contains embedded HTML and script code. The embedded code may be rendered in the web browser of the victim user.

This could potentially be exploited to steal cookie-based authentication credentials from legitimate users. Other attacks are also possible.

ZyXEL ZyWALL 10 Management Interface Cross-Site Scripting Vulnerability

The following example was provided:

http://<host>/Forms/rpAuth_1?ZyXEL%20ZyWALL%20Series<script>alert('XSS')</script>

ZyXEL ZyWALL 10 Management Interface Cross-Site Scripting Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

ZyXEL ZyWALL 10 Management Interface Cross-Site Scripting Vulnerability

References:

• ZyWALL 10 Product Page (ZyXEL)
  
• ZyXEL10 OF ZyWALL Series Router Cross Site Scripting Vulnerabillity ("Rafel Ivgi" )