Jason Wachtel has reported a weakness in the Zonet ZSR1104WE wireless router, which may prevent identification of remote attackers.

A NAT implementation error causes the router to convert IP addresses of inbound connections on the WAN interface to its own local IP address before forwarding the connections to internal systems.

The issue has been reported in the Zonet ZSR1104WE wireless router with the following specifications:
Hardware Version Rev. A
Boot Code Version 1.0
Runtime Code Version 2.41

It is currently unknown whether this has been fixed in the latest firmware release (V2-6), which was released 15th April 2004.

Solution
Use another product if filtering and logging of external connections' IP addresses is required.

Provided and/or discovered by
Jason Wachtel

Deep Links
Links available in Customer Area