CVE-2007-4317: CSRF
Multiple cross-site request forgery (CSRF) vulnerabilities in the management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device allow remote attackers to perform certain actions as administrators, as demonstrated by a request to Forms/General1 with the (1) sysSystemName and (2) sysDomainName parameters.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-4317?
CVE-2007-4317 is classified as a moderate severity vulnerability due to its potential impact on administrative actions of the Zyxel Zywall 2 device.
How do I fix CVE-2007-4317?
To mitigate CVE-2007-4317, it is recommended to upgrade to the latest firmware version that addresses this vulnerability.
What types of attacks are possible with CVE-2007-4317?
CVE-2007-4317 allows remote attackers to perform unauthorized actions on the management interface through cross-site request forgery (CSRF).
Which devices are affected by CVE-2007-4317?
CVE-2007-4317 affects Zyxel Zywall 2 devices running ZyNOS firmware version 3.62.
Is CVE-2007-4317 easily exploitable?
Yes, CVE-2007-4317 can be easily exploited by attackers who can craft malicious requests targeting the management interface.