OSVDB ID: 37669 Title: ZyXEL ZyWALL 2 ZyNOS Management Interface Default Password |
Info |
|
|
Dates |
||||
|
|
Description |
By default, Zyxel ZyWall comes with a default password. The admin account has a password which is publicly known and documented. This allows attackers to trivially access the program or system, either from local network or exploiting the Cross-Site Request Forgery -vulnerability discovered in the web management interface. |
Classification |
Location:
Remote / Network Access
Attack Type: Authentication Management, Misconfiguration Impact: Loss of Integrity Solution: Change Default Setting Disclosure: OSVDB Verified OSVDB: Web Related |
Solution |
Immediately after installation, change all default installed accounts to use a unique and secure password. When possible, change default account names to custom names as well. |
Products |
Unknown or Incomplete |
References |
|
Credit |
Unknown or Incomplete |