CVE-2018-1164: Critical severity zyxel p-870h-51 firmware vulnerability

Published Feb 21, 2018

Updated

This vulnerability allows remote attackers to cause a denial-of-service condition on vulnerable installations of ZyXEL P-870H-51 DSL Router 1.00(AWG.3)D5. Authentication is not required to exploit this vulnerability. The specific flaw exists within numerous exposed CGI endpoints. The vulnerability is caused by improper access controls that allow access to critical functions without authentication. An attacker can use this vulnerability to reboot affected devices, along with other actions. Was ZDI-CAN-4540.

Affected Software

2 affected components

Zyxel P-870h-51 Firmware=1.00\(awg.3\)d5

Zyxel P-870H-51

Event History

Feb 21, 2018

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-1164?

CVE-2018-1164 is rated as a medium severity vulnerability, allowing potential denial-of-service attacks.

How do I fix CVE-2018-1164?

To mitigate CVE-2018-1164, update the ZyXEL P-870H-51 DSL Router to the latest firmware version provided by the vendor.

Who is affected by CVE-2018-1164?

CVE-2018-1164 affects installations of ZyXEL P-870H-51 DSL Router running firmware version 1.00(AWG.3)D5.

Is authentication required to exploit CVE-2018-1164?

No, authentication is not required to exploit CVE-2018-1164, making it particularly concerning.

What are the consequences of exploiting CVE-2018-1164?

Exploiting CVE-2018-1164 can lead to a denial-of-service condition on the affected router, disrupting network connectivity.