CVE-2013-3588: Input Validation
Published Apr 2, 2014
·Updated
The web management interface on Zyxel P660 devices allows remote attackers to cause a denial of service (reboot) via a flood of TCP SYN packets.
Affected Software
15 affected components
Zyxel P-660h-61
Zyxel P-660h-63
Zyxel P-660h-67
Zyxel P-660h-d1
Zyxel P-660h-d3
Zyxel P-660h-t1
Zyxel P-660h-t1=v2
Zyxel P-660h-t3=v2
Zyxel P-660HW=_t1
Zyxel P-660HW=_t1-v2
Zyxel P-660hw D1
Zyxel P-660hw D1=v2
Zyxel P-660hw D3
Zyxel P-660hw T3
Zyxel P-660hw T3=v2
Event History
Apr 2, 2014
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Data Sourced
via NVD·03:58 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-3588?
CVE-2013-3588 has a medium severity rating due to its potential to cause a denial of service on affected Zyxel devices.
2
How do I fix CVE-2013-3588?
To mitigate CVE-2013-3588, users should apply any available firmware updates or patches provided by Zyxel for the affected models.
3
Which devices are affected by CVE-2013-3588?
CVE-2013-3588 affects various Zyxel P-660 models, including the P-660h-61, P-660h-63, and P-660hw D3 among others.
4
What is the impact of CVE-2013-3588?
The impact of CVE-2013-3588 is a denial of service that could lead to device instability or rebooting due to TCP SYN packet flooding.
5
Is CVE-2013-3588 a remote attack vector?
Yes, CVE-2013-3588 allows remote attackers to launch a denial of service attack from an external network.