Secunia

Francisco "José" Canela has reported a vulnerability in ZyXEL Prestige 650HW, which can be exploited by malicious people to reset the configuration of a vulnerable device.

The problem is that "/rpFWUpload.html" used for uploading firmware and resetting the configuration isn't protected. This can be exploited to reset the configuration and potentially hi-jack the device.

This has been reported to affect ZyXEL Prestige 650HW, Prestige 623, Prestige 645-A1 series, and Prestige 652 series. Other devices running ZyNOS may also be affected.

Solution
Filter access to affected devices.

Provided and/or discovered by
Francisco "José" Canela

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area